Although the article shows a simple technique there are many things that were omitted.

This is NOT a way to handle such things if there are strict requirements from security standpoint.

1. You could potentially read the record, delete it and insert it back again with the changes you want.

The update trigger will never Know:(

2. Workstation_id and application_name are values "settable" on the connection string and can be manipulated.

3. To Rollback in a trigger is a very expensive proposition for a busy system.

4. This kind of control should be performed using other security mechanisms.

All in all the article shows "a way" to do it I just wanted to point out that this is by no means THE way of doing such things if strict requirements are needed.