From: | John Scalia <jayknowsunix(at)gmail(dot)com> |
---|---|
To: | "pgsql-admin(at)postgresql(dot)org" <pgsql-admin(at)postgresql(dot)org> |
Subject: | Fwd: Can I bother you for some more assistance? |
Date: | 2017-01-06 15:55:26 |
Message-ID: | CABzCKRAnPg6vJSd-6FmO0LgxtfCd9nJoTGstPUKFToD+-XkF+Q@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-admin |
Hi all,
This may not be the most appropriate forum for this question, but if anyone
know of a better one, I'd be happy to change the destination, anyway I've
been struggling most of this morning to get pgaudit working with object
logging on a test database, but I can't seem to get it working properly.
Apologies for the length of this, but here's the procedure I've been
following:
psql -U postgres postgres
CREATE DATABASE phi;
GRANT ALL ON DATABASE phi TO postgres;
\c phi
-- Null out pgaudit.log or the extension will not load
SET pgaudit.log = '';
CREATE EXTENSION pgaudit;
SET pgaudit.log = 'function,ddl,rule,misc';
\i .usr/pgaudit_analyze/sql/audit.sql
--- I have to exit the database at this point or the create schema database
command will fail, not sure why. Maybe the audit.sql is doing something
weird.
\q
psql -U postgres phi
CREATE SCHEMA phi;
SET search_path TO phi, pgaudit, public;
GRANT ALL ON SCHEMA phi TO postgres;
CREATE TABLE patient (id INT, 'first_name' VARCHAR(20), 'last_name'
VARCHAR(30), SS_NUM CHAR(12), mpi VARCHAR(20));
SET pgaudit.role = 'auditor';
GRANT select, update, delete on patient TO auditor;
-- The INSERT command should not logged
INSERT INTO patient VALUES (1, 'Test', 'Test', '000-00-0000', 'T29383');
-- The UPDATE should be logged
UPDATE patient SET mpi = 'T459093';
If you'll note the last 4 commands, they're basically identical to the
pgaudit instructions, but the CSV logfile shows '<not logged>' for both of
these as opposed to showing that the UPDATE command should have been
logged. In any event, I can't determine what step(s) I might be missing,
and nothing is coming to mind immediately. Can anyone assist?
TIA,
Jay
From | Date | Subject | |
---|---|---|---|
Next Message | Ferrell, Denise D CTR NSWCDD, H11 | 2017-01-06 19:02:12 | Restoring from backup |
Previous Message | Günce Kaya | 2017-01-06 08:47:14 | Re: Displaying ProcessList to Users |