3.oracle对某张表的delete记录进行审计

生产数据库发现数据表PROD.PROD_TRACKING_NO的数据被无故删除，需要对该张表的delete记录进行审计

1、设计审计策略

exec dbms_fga.add_policy(object_schema=>'PROD',object_name=>'PROD_TRACKING_NO',policy_name=>'PROD_TRACKING_NO_FGA',statement_types=>'delete');

2、开启审计策略

exec  dbms_fga.enable_policy(object_schema=>'PROD',object_name=>'PROD_TRACKING_NO',policy_name=>'PROD_TRACKING_NO_FGA');

3、查询审计记录

select * from  dba_fga_audit_trail;

4、查询添加了细粒度的对象

SELECT * FROM DBA_AUDIT_POLICIES；

-----------------------后续维护，若需要------------------------------
----停用审计策略

exec  dbms_fga.disable_policy(object_schema=>'PROD',object_name=>'PROD_TRACKING_NO',policy_name=>'PROD_TRACKING_NO_FGA');

----删除审计策略

begin

SYS.DBMS_FGA.DROP_POLICY (

object_schema => 'PROD'

,object_name => 'PROD_TRACKING_NO'

,policy_name => 'PROD_TRACKING_NO_FGA'

);
END;