That is nice and robust solution! But since triggers can be disabled by privileged users, this won't work for internal access violation...