> I could make any adjustment I want to posted GL transactions using SQL and knowledge of the chart of accounts and subledgers. No one would know unless it is a transaction picked for audit. This is true at least for Oracle ERP - there is no database row-level security for posted GL transactions.

> So auditors belief that an Oracle ERP system gives them confidence in a company audit is misguided.

I'm no expert, but I don't think typical auditors are there to find things like that.