tailieunhanh - mastering sql server 2000 security PHẦN 9

Có thể người dùng kết nối đến Server Phân tích Thông qua hai phương tiện khác nhau. Các khách hàng có thể Hoặc trực tiếp kết nối với máy chủ phân tích hoặc các khách hàng có thể sử dụng Internet Information Server (IIS) để kết nối đến máy chủ. Một kết nối trực tiếp được thực hiện khi người sử dụng các nỗ lực để kết nối với một máy chủ phân tích bằng cách giao tiếp | 342 Chapter 14 the level of auditing the more overhead you will have to create in the application. This overhead generally increases the complexity of maintaining the process. Use the more complicated options only when they are a requirement of your business system. In most cases application auditing can be simple and used to store the most recent change information. Following are the three levels of auditing New record tracking. You may only need to know the user who added a record to the table which would make this level of auditing appropriate. Modification tracking. In addition to knowing the user who added a record you may need to track the user who made the last change. If this is your desired level of auditing you should determine how detailed this level of tracking should be. You will need to know the answers to the following two questions After a record is modified do you still need to know the user who added the record When a record is modified do you need to be able to track all modifications or just the most previous change Deletion tracking. At this level you need to determine if you want to track a record that has been deleted. If you want to track the deleted records you also need to determine if you want to store the original new record tracking and modification tracking information. The following sections describe the changes that need to occur within your database to support these levels of application auditing. New Record Tracking New record tracking is the easiest level of application auditing to implement. You will want to be able to track the user who performed the operation that added the new record. On the tables that you want to audit you will need to add a column that stores the username of the user who created the record. For the new column you need to create a default that uses the user-name function. If the column is not supplied by the INSERT statement then the username function fills in the value. The username function supplies the .