Monitoring user's transactions

Question

Hi,
I work in a department mainly uses purchasing, procurement, inventory and warehousing modules. We have identified responsibilities that are in conflict with each and will usually not grant conflicting ones to users when they ask for them. However, there are some valid situations where we can give conflicting responsibilities to a user.
I'm tasked with determining if there's a report that we can generate, or an application, or method that we can use to track which of our users have responsibilities that are conflicting, and what transactions/actions they have done in Oracle. We want to be able to determine afterwards if there are any actions that are suspicious from the users.
For example, normally, a buyer should not be a receiver as well. But if we do grant them both to one person, and there are valid situations for us to do so, then we want to check if they haven't ordered a 56" Plasma TV and received it as well.
Any advice, or direction would be appreciated.
Thanks in advance.

Answer 1

914797 wrote:
Thanks for your reply Karthickumar.
I'd like to set it up so that the views would be run periodically throughout the day. Would this affect the performance level of Oracle in any way for the users?
Thanks.You can do that already with enterprise manager. Perhaps you don't see that you are asking an application question in a database forum. Justin is trying to help guide you towards the proper questions to ask. There may be such a report already in your app. What app is it? Oracle Apps? I use all those modules in software that is not Oracle apps, so my answer would be different. In fact, I wrote customizations to deal with it, since the basic app didn't reflect our business practices. But they didn't get implemented, since the new VP wants to change practices.
More broadly, the question of how to be sure people don't steal from you is separation of responsibilities. You are short-circuiting that. So you really have to report everything that is done by people with these overly broad responsibilities, and audit it.
Back in the early '80's I worked on an inventory control system. They built us new offices inside a warehouse. They built a cage around our offices so we wouldn't walk off with a vcr. My boss was offended and hung a tire from the cage. There was absolutely nothing stopping us programmers from shipping 500 big screen tv's to our friends. But no one ever did. The Strategic Planner, on the other hand, built his empire, sold the company and kept the new VAXen for himself. It's all a question of management priorities. Owners were quite happy to get top dollar for the company and dump everything and everyone else. Remember that the next time someone tries to tell you to vote against defined-benefit retirement plans.