对象audit时的一个有用option：ON DEFAULT

在使用对象权限审计时如果使用on default选项，有一下几个方面需要注意：

1、设置on default之后，它仅对之后创建的对象生效

2、on default对之后创建的对象永远生效，即使以后设置了noaudit all（或者其他）on default；除非单独对某个对象设置noaudit all（或者其他）on object_name才能彻底取消on default选项引起的审计

3、使用view时，对表和view同时记录审计结果(union)

[@more@]

ON DEFAULT

Specify ON DEFAULT to establish the specified object options as default object options for subsequently created objects. After you have established these default auditing options, any subsequently created object is automatically audited with those options. The default auditing options for a view are always the union of the auditing options for the base tables of the view. You can see the current default auditing options by querying the ALL_DEF_AUDIT_OPTS data dictionary view.

When you change the default auditing options, the auditing options for previously created objects remain the same. You can change the auditing options for an existing object only by specifying the object in the ON clause of the AUDIT statement.

--===============================

example:

Setting Default Auditing Options: Example The following statement specifies default auditing options for objects created in the future:

AUDIT ALTER, GRANT, INSERT, UPDATE, DELETE
    ON DEFAULT; 

Any objects created later are automatically audited with the specified options that apply to them, if auditing has been enabled:

• If you create a table, then Oracle Database automatically audits any ALTER, GRANT, INSERT, UPDATE, or DELETE statements issued against the table.

• If you create a view, then Oracle Database automatically audits any GRANT, INSERT, UPDATE, or DELETE statements issued against the view.

• If you create a sequence, then Oracle Database automatically audits any ALTER or GRANT statements issued against the sequence.

• If you create a procedure, package, or function, then Oracle Database automatically audits any ALTER or GRANT statements issued against it.

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/19602/viewspace-1021384/，如需转载，请注明出处，否则将追究法律责任。

转载于:http://blog.itpub.net/19602/viewspace-1021384/