Reforming queries to selectively audit accesses to rows within a relational database

A computer-readable storage medium storing instructions to be executed by a computer causing the computer to perform a method for selectively auditing accesses to a relational database, comprising:

• receiving a query for the relational database;
• selectively auditing an access to the relational database,
• wherein selectively auditing the access involves automatically modifying the query prior to processing the query,
• wherein an auditing condition for the selective auditing specifies a condition based on a value of a field in a row in the relational database, and
• wherein satisfying the auditing condition allows selective auditing of the query,
• processing the modified query to produce a query result, wherein processing the modified query includes:
• creating audit records only for rows in relational tables accessed by the query and that satisfy the auditing condition, and
• recording the audit records in an audit record store;
• and
• returning the query result;
• wherein if the query modifies at least one entry in the relational database, the method further comprises using a relational database system trigger to create and record the audit record for the modification to the relational database.

An apparatus for selectively auditing accesses to a relational database, comprising:

• a receiving mechanism configured to receive a query for the relational database;
• a selective auditing mechanism configured to selectively audit an access to the relational database,
• wherein selectively auditing the access involves automatically modifying the query prior to processing the query,
• wherein an auditing condition for the selective auditing specifies a condition based on a value of a field in a row in the relation database, and
• wherein satisfying the auditing condition allows selective auditing of the query,
• a query processor configured to process the modified query to produce a query result, wherein processing the modified query includes:
• creating audit records only for rows in relational tables accessed by the query and that satisfy the auditing condition, and
• recording the audit records in an audit record store;
• and
• a returning mechanism that is configured to return the query result;
• wherein is the query modifies at least one entry in the relational database, the apparatus uses a relational database system trigger to create and record the audit record for the modification to the relational database.

A computer-implemented method for selectively auditing accesses to a relational database, comprising:

• receiving a database operation for the relational database;
• selectively auditing an access to the relational database based on an auditing condition, wherein the auditing condition for the selective auditing specifies a condition based on a value of a field in a row in the relational database;
• processing the database operation to produce a database operation result, wherein processing the database operation includes:
• creating audit records only for selected rows in the relational database that are accessed by the database operation and that satisfy the auditing condition, and
• recording the audit records in an audit record store;
• and
• returning the database operation result;
• wherein selectively auditing the access involves automatically modifying the database operation prior to processing the database operation,
• wherein satisfying the auditing condition allows selective auditing of the database operation and not for other rows;
• wherein satisfying the auditing condition allows selective auditing of the database operation;
• and
• wherein if the database operation modifies at least one entry in the relational database, using a relational database system trigger to create and record the audit record for the modification to the relational database.

A computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for selectively auditing accesses to a relational database, the method comprising:

• receiving a database operation for the relational database;
• selectively auditing an access to the relational database based on an auditing condition, wherein the auditing condition for the selective auditing specifies a condition based on a value of a field in a row in the relational database;
• processing the database operation to produce a database operation result, wherein processing the database operation includes:
• creating audit records only for selected rows in the relational database that are accessed by the database operation and that satisfy the auditing condition, and
• recording the audit records in an audit record store;
• and
• returning the database operation result;
• wherein selectively auditing the access involves automatically modifying the database operation prior to processing the database operation,
• wherein satisfying the auditing condition allows selective auditing of the database operation and not for other rows;
• wherein satisfying the auditing condition allows selective auditing of the database operation;
• and
• wherein if the database operation modifies at least one entry in the relational database, using a relational database system trigger to create and record the audit record for the modification to the relational database.

An apparatus for selectively auditing accesses to a relational database, comprising:

• a receiving mechanism configured to receive a database operation for the relational database;
• a selective auditing mechanism configured to selectively audit an access to the relational database based on an auditing condition, wherein the auditing condition for the selective auditing specifies a condition based on a value of a field in a row in the relational database;
• a processing mechanism configured to process the database operation to produce a database operation result;
• a creating mechanism configured to create audit records only for selected rows in the relational database that are accessed by the database operation and that satisfy the auditing condition, and
• a recording mechanism configured to record the audit records in an audit record store;
• and
• a returning mechanism configured to return the database operation result;
• wherein selectively auditing the access involves automatically modifying the database operation prior to processing the database operation,
• wherein satisfying the auditing condition allows selective auditing of the database operation and not for other rows;
• wherein satisfying the auditing condition allows selective auditing of the database operation;
• and
• wherein if the database operation modifies at least one entry in the relational database, the apparatus uses a relational database system trigger to create and record the audit record for the modification to the relational database.