Kuali Security Audit
- Kathleen Avery (Deactivated)
- David Chudnow (Deactivated)
- Former user (Deleted)
- Richard Ritchie
Description: Find all usernames accessing KFS and KR tables with PII data that has an action other than select. Only six-months worth of data is kept in the audit table.
Frequency: Monthly (usually third Thursday of the month)
| KFS Tables audited |
|---|
AR_CUST_T |
CHECK_RECONCILIATION_T |
FP_BANK_T |
FP_DV_WIRE_TRNFR_T |
FP_PRCRMNT_CARD_HLDR_DTL_T |
FP_PRCRMNT_CARD_HLDR_T |
FP_PRCRMNT_CARD_TRN_T |
FS_PMT_SRC_WIRE_TRNFR_T |
PDP_ACH_ACCT_NBR_T |
PDP_PAYEE_ACH_ACCT_T |
PUR_VNDR_HDR_T |
PUR_VNDR_TAX_CHG_T |
TAX_PAYEE_T |
KREW_DOC_HDR_CNTNT_T |
KRNS_MAINT_DOC_T |
View:
AUDIT_TRAIL
| Column Name | Length | Sample Data |
|---|---|---|
| OS_USERNAME | 255 | tomcat kfsctmuser iadmin ucdstage dsadm root btp98001 kec14023 kaa02003 |
| USERNAME | 30 | KR_PRD KFS_PRD ACH_UAT_USR_RO KFS_PRD_ETL_RO RSMART_RO KFS_PRD_FOC_RO BTP98001 KEC14023 KAA02003 |
| USERHOST | 128 | dsprod webfocusprod dsdev webfocusdev HZMW5S1 BZ1NBP1 9HDKVV1 UCONN\HZMW5S1 kfs20.uits.uconn.edu |
| TIMESTAMP | 19 | |
| OWNER | 30 | KFS_PRD KR_PRD |
| OBJ_NAME | 128 | AR_CUST_T
|
| ACTION_NAME | 28 | UPDATE INSERT DELETE SELECT |
Current Query used -
select distinct USERNAME, current_timestamp
from audit_trail
where ACTION_NAME <> 'SELECT';
Other Information -
ACH_UAT_USR_RO etlprod.its.uconn.edu is a production userid, used by the etl group. The userid is used in a datastage process extracts CORE-CT ACH data and updates the PDP_PAYEE_ACH_ACCT_T with that data. Information about ACH can be found in ACH Table Load.
Results by year: