fine-grained audit功能笔记

fine-grained audit: 根据指定的条件来audit

这是一个security的功能

fine-grained 记录保存在SYS.FGA_LOG$, 可以通过dba_fga_audit_trail来查看。

创建测试表
drop table test purge;

create table test ( id number not null, tname varchar2(30));
alter table test add constraint test_pk primary key (id);

insert into test values (1,'PETER');
insert into test values (2,'JACKY');
insert into test values (3,'JOHN');
insert into test values (4,'MIKE');
commit;

增加一个audit policy

begin
dbms_fga.drop_policy (
object_schema => 'RMAN',
object_name => 'TEST',
policy_name => 'audit_test'
 );
end;
/

begin
dbms_fga.add_policy (
object_schema => 'RMAN',
object_name => 'TEST',
policy_name => 'audit_test',
audit_condition=> 'id > 2',
audit_column => 'id',
enable => TRUE,
statement_types=> 'insert,update,select,delete' );
end;
/

创建测试数据
insert into test values (5,'PHILIP');
insert into test values (6,'JASON');
commit;

查看audit结果
select * from dba_audit_policies

select sql_text from dba_fga_audit_trail

如果audit占用太多空间，删除下列表
truncate table FGA_LOG$;

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/27143/viewspace-672617/，如需转载，请注明出处，否则将追究法律责任。

转载于:http://blog.itpub.net/27143/viewspace-672617/