Creating an audit via RTP27 (OpenInsight 16-Bit Specific)
At 18 FEB 2004 07:35:48AM Simon G Wilmot wrote:
I want to audit program calls within OI for specific users because of the Sarbanes Oxley auditting requirements.
It would seem that the best way to do this is to create a replacement RTP27 to do my bits and then call the original that has been renamed, however, it appears that there may be some extra requirements to this.
Can anyone expand on those requirements,
Regards,
Simon Wilmot
(Returning after a 2 year absence)
At 18 FEB 2004 07:50AM The Sprezzatura Group wrote:
Simon, firstly welcome back! Where are you now? It would seem that Sarbanes Oxley is not as onerous as this posting implies, are you acting on specific advice? You will be introducing both a slowdown to your system and potential point for unanticipated system failure where none existed before.
The Sprezzatura Group
World Leaders in all things RevSoft
At 18 FEB 2004 08:26AM Simon G Wilmot wrote:
Thank you - working for myself for anybody who wants to employ me !!
Currently doing some work for Rebus again … the user specifically wants an audit for the 'Supervisor' level user against any program that can be called from a menu item, specific buttons etc. Things like Audit cleardown etc that could possibly mask some not so honest activities.
The slowdown should be negligible against other users.
If you have any other suggestions I'm willing to listen.
Simon
At 18 FEB 2004 08:43AM The Sprezzatura Group wrote:
If it is SOLELY for stuff that can be done from Menus, Buttons etc then we'd suggest a promoted event at a sufficiently generic level. We currently use one at the APP*..OIWIN* level and that should get MENUS and CLICKs although conceivably SYSPROG*CLICK..OIWIN* might get in the way - you'd want to test this.
The Sprezzatura Group
World Leaders in all things RevSoft
At 18 FEB 2004 08:49AM Simon G Wilmot wrote:
I can see what you mean - I think clicks would be a problem, and I know there will be a number of them, and with these, often it will be a selection from an edit-table that the click event will call, so you can see my quandary - I'm fairly sure that there will be a number that will be called from elsewhere as well, its not until I have gone through with a fairly fine tooth comb that I will know exactly what is needed to be auditted …
At 19 FEB 2004 05:56AM Simon G Wilmot wrote:
I've done some testing on this and can't see an easy way round it. The promoted event isn't always getting actioned.
Is there a way of doing this via RTP27 or am I going to have to find another method.
I have noted in testing that deleting $RTP27 from Sysobj has no effect whatsoever !!
Simon
At 19 FEB 2004 06:00AM The Sprezzatura Group wrote:
You'd have to add another event at a suitable level, ensure it is enforced in EVENTDESIGNER and recompile all the Windows. Utility to do this is on Sprezz site.
The Sprezzatura Group
World Leaders in all things RevSoft
At 19 FEB 2004 06:05AM Simon G Wilmot wrote:
Unfortunately not particularly feasible for an add on for a specific customer …
At 19 FEB 2004 06:06AM The Sprezzatura Group wrote:
Sorry there ARE issues relating to doing this with RTP27, they are not insurmountable but…
The Sprezzatura Group
World Leaders in all things RevSoft
At 19 FEB 2004 06:12AM The Sprezzatura Group wrote:
Well, possible, just more difficult and has licensing implications - you'd be modifying Rebus' code and their license may not provide for that. As fro RTP27 we're not really comfortable discussing system mods though on a public forum. This is not even the Works Forum and as such is fairly publicly accessible. Sorry. How about an MFS on the relevant program files?
The Sprezzatura Group
World Leaders in all things RevSoft
At 19 FEB 2004 06:16AM Simon G Wilmot wrote:
I understand your reluctance to discuss on here. Perhaps e-mail ??
Assuming you mean Sysobj, I tried that but it isn't invoked …
Simon
swilly_mdhc@yahoo.co.uk
At 19 FEB 2004 06:42AM The Sprezzatura Group wrote:
See Email
The Sprezzatura Group
World Leaders in all things RevSoft