jobs (job_id, job_title, min_salary, max_salary)
values ('OE_VLD','Order Entry CC Validation', 5500, 20000);
KSHELTON 08/12/07 22:51 LOGON
3 rows selected.
Fine-Grained Auditing
Starting with Oracle9i, auditing became much more focused and precise with the introduction of
fine-grained object auditing, or FGA. FGA is implemented by a PL/SQL package called DBMS_FGA.
With standard auditing, you can easily find out what objects were accessed and by whom,
but you don??™t know which columns or rows were accessed. Fine-grained auditing addresses this
problem by not only specifying a predicate, or where clause, for which rows need to be accessed,
but also by specifying a column or columns in the table being accessed. This can dramatically
reduce the number of audit table entries by only auditing access to the table if it accesses certain
rows and columns.
The package DBMS_FGA has four procedures:
ADD_POLICY Adds an audit policy using a predicate and audit column
DROP_POLICY Drops the audit policy
DISABLE_POLICY Disables the audit policy but keeps the policy associated with the table
or view
ENABLE_POLICY Enables a policy
The user TAMARA usually accesses the HR.EMPLOYEES table on a daily basis to look up
employee e-mail addresses. The system administrators suspect that TAMARA is viewing salary
information for managers, so they set up an FGA policy to audit any access to the SALARY
column for anyone who is a manager:
begin
dbms_fga.
Pages:
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555