RE: DBA_STMT_AUDIT_OPTS versus DBA_PRIV_AUDIT_OPTS and SELECT ANY TABLE (Confused)

From: <Christopher.Taylor2_at_parallon.net>
Date: Mon, 11 Mar 2013 12:31:42 -0500
Message-ID: <F05D8DF1FB25F44085DB74CB916678E88582FD6D5F_at_NADCWPMSGCMS10.hca.corpad.net>



It's strange - I'm getting audit records for unsuccessful SELECTS and its from users that do not have SELECT ANY TABLE nor is there auditing turned on at the object layer.

I wonder what AUDIT is enabling the SELECT auditing in that case - any ideas?

Chris

-----Original Message-----

From: Don Granaman [mailto:DonGranaman_at_solutionary.com] Sent: Monday, March 11, 2013 12:21 PM
To: Taylor Christopher - Nashville; oracle-l_at_freelists.org Subject: RE: DBA_STMT_AUDIT_OPTS versus DBA_PRIV_AUDIT_OPTS and SELECT ANY TABLE (Confused)

Actually, almost all privilege and statement auditing shows up in both views. (I have no idea why though.) The only auditing initiated by "audit select any table" is auditing the use of the 'SELECT ANY TABLE" system privilege. It does NOT mean that selects are being audited against all tables, even for users without this system privilege.

Don Granaman | Ph: 402-361-3073 | Cell: 402-960-6955 | Solutionary - Relevant | Intelligent | Security
--

http://www.freelists.org/webpage/oracle-l Received on Mon Mar 11 2013 - 18:31:42 CET

Original text of this message