Release 10.1A: OpenEdge Development:
Programming Interfaces

Auditing

Auditing is a means of securely tracking and recording a trail of events that occur during execution of an application. The basic security in auditing allows this trail of events (audit events) to be recorded in a manner that cannot be changed or otherwise repudiated after the fact. OpenEdge provides core support for recording secure audit trails in any OpenEdge RDBMS that is enabled for auditing.

Auditing occurs for any Progress 4GL application that connects to a database that is enabled for auditing, based on its auditing configuration. For some auditing events, OpenEdge automatically records them in the audit trail, based on active audit policies (rules) that govern how audit trails are defined, tracked, and recorded. For other auditing events, you must instruct the application to record them using 4GL elements, and OpenEdge these events, again, based on active audit policies.

You can also develop custom tools in the 4GL for auditing configuration and management. OpenEdge supports additional 4GL elements and procedure APIs for this purpose.

For more information on auditing and how to configure and enable auditing in an OpenEdge RDBMS, see OpenEdge Getting Started: Core Business Services . This chapter provides basic information on how to perform the following tasks in the Progress 4GL:

Setting up application security for auditing
Recording application events
Developing auditing tools