[sims] Who accessed a users details?

[CapnPugwash]

Hi folks, I think I know the answer to this all ready but just to be sure:

 

Is there any way at all to find out which teachers/staff have accessed a particular users details?

 

From similar threads I've read, I'm guessing the answer is NO.

[CapnPugwash]

digging in deep through this forum, someone mentioned 'SQL profiler' - anyone know if this is worth pursuing?

[Grey-gear]

If you have managing writes to make users you can see who has what policies, if I was doing it I would look at the users with System Manager 6. It may be different for yourself. Edited December 13, 2013 by Grey-gear
Because it did not make sense the first time

[CapnPugwash]

Not quite sure what you are saying, perhaps I need to rephrase the question:

 

If all teaching staff have read access to all student records

Can I find out which teachers have accessed which records? (where no change has been made, they have just accessed the record)

[Grey-gear]

Oh? I think if you go to the sims server and have a look at the SQL I think that may show you what they been on but that could be if they have made changes only. Sorry I can't help more I never tried doing this myself.

[vikpaw]

You'd be hard pushed to track read events. Tracking changes is hard enough

[CapnPugwash]

Yeah... I think it's impossible, I just needed it confirming.

 

It's not actually an issue as such, senior leadership are just looking at how secure our data is.

 

I am a bit surprised that SIMs doesn't do this... I realise it'd generate a pretty HUGE log file that you'd probably never need to look at but I think parts of the NHS does this with their patient management systems... and it makes sense to do so. I don't think the Head will be pleased, especially given the cost of SIMs

[jinnantonnixx]

It's not possible. Just logging into SIMS reads pupil data (through the home page widgets). Complete, all-user table scans are done frequently for many tasks, even if the pupil data is not displayed on screen (e.g. aggregate stats)

 

So, in a nutshell, the answer is no.

 

In places like the DVLA, a screen deals with a single, individual record - there are no pages of records like in SIMS. At the DVLA, every record access/view is logged. It's a different situation entirely.

Edited December 13, 2013 by jinnantonnixx

[CapnPugwash]

Ah... That explains it. Now it does make sense, Cheers!

[matt40k]

Shame Capita can't give an option to use MS-SQL Audit, loads better then using profiler - can pick what tables to audit and less of a performance impact. OK don't think it works on Express but hey.