cant u use auditing for this?