On Wed, Jul 15, 2015 at 10:31 AM, Scott Ribe <scott_r...@elevated-dev.com>
wrote:

> On Wed, Jul 15, 2015 at 12:36 AM, Zdravko Balorda <li...@ruby-forum.com>
> wrote:
>
> > The aim is to find an exact point when some specific change in the
> > database has occurred and who did it, and to document it.
>
> Given your statement about legal requirements, I think it would be highly
> inappropriate to attempt to do that in Rails. You need to do it in the
> database, so that the audit log cannot be circumvented merely by making
> changes without going through your Rails app.
>

​Agreed. If you're using PostgreSQL there's a somewhat experimental
pg_audit extension that uses triggers to maintain a change log.​ Oracle has
AUDIT, etc..

Paul


> --
> Scott Ribe
> scott_r...@elevated-dev.com
> http://www.elevated-dev.com/
> https://www.linkedin.com/in/scottribe/
> (303) 722-0567 voice
>
>
>
>
>
> --
> You received this message because you are subscribed to the Google Groups
> "Ruby on Rails: Talk" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to rubyonrails-talk+unsubscr...@googlegroups.com.
> To post to this group, send email to rubyonrails-talk@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/rubyonrails-talk/9607EA48-BB99-433E-88C1-4EF2516EEC37%40elevated-dev.com
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Talk" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to rubyonrails-talk+unsubscr...@googlegroups.com.
To post to this group, send email to rubyonrails-talk@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/rubyonrails-talk/CAMEJyitCPYV8uUiGMnxFiQ%3DYXyQ2RMpmDd2aNvXCpvEJo3OVbQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to