| audit the logs for selecting particular column [message #454008] |
Mon, 03 May 2010 07:37  |
grpatwari
Messages: 288
Registered: June 2008
Location: Hyderabad
|
Senior Member |
|
|
|
I have a requirement of implementing audit logs in my application. Insert,update,delete operations can be logged using triggers. How to audit logs in case of Read / Select operation on tables on a particular column? Is there any specific way of implementing audit logs for Read operation on tables on a particular column?
|
|
|
|
|
|
|
|
|
|
| Re: audit the logs for selecting particular column [message #454067 is a reply to message #454008] |
Tue, 04 May 2010 00:38  |
grpatwari
Messages: 288
Registered: June 2008
Location: Hyderabad
|
Senior Member |
|
|
I m following the below procedure for FGA.
1) I m changing audit_trail parameter to db or db_extended.
2) I am connecting to our schema user.
3) I m giving auditing select permissions to a particular table but i m not able to select particular column.
audit select on emp by access;
but i want to give ...
audit select on empno column on emp table.
4) I want to write the auditing details in one of my user table with the details like username,tablename,timestamp,column name etc.
Please advice how to do the above procedure.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Re: audit the logs for selecting particular column [message #454177 is a reply to message #454008] |
Tue, 04 May 2010 06:16 |
grpatwari
Messages: 288
Registered: June 2008
Location: Hyderabad
|
Senior Member |
|
|
I have run the following block as sys user.
SQL> BEGIN
2 DBMS_FGA.ADD_POLICY(
3 object_schema => 'IPDC'
4 ,object_name => 'SERVICEPROGRAM'
5 ,policy_name => 'IPDC_POLICY'
6 ,audit_condition => null
7 ,audit_column => 'AUTHENTICATIONSEED'
8 ,handler_schema => 'IPDC'
9 ,handler_module => NULL
10 ,enable => TRUE
11 ,statement_types => 'SELECT,INSERT,UPDATE,DELETE'
12 ,audit_trail => DBMS_FGA.DB_EXTENDED
13 ,audit_column_opts => DBMS_FGA.ANY_COLUMNS
14 );
15 END;
16 /
BEGIN
*
ERROR at line 1:
ORA-00439: feature not enabled: Fine-grained Auditing
ORA-06512: at "SYS.DBMS_FGA", line 17
ORA-06512: at line 2
Output of the below query
SQL> select * from v$version;
BANNER
----------------------------------------------------------------
Oracle Database 10g Release 10.2.0.4.0 - Production
PL/SQL Release 10.2.0.4.0 - Production
CORE 10.2.0.4.0 Production
TNS for Linux: Version 10.2.0.4.0 - Production
NLSRTL Version 10.2.0.4.0 - Production
5 rows selected.
We are using standard edition.
|
|
|
|
|
|
|
|
|
|
] 
Blog
Search
Help
Members
Register
Login
Home
