Home » RDBMS Server » Security » Row-level auditing
Row-level auditing [message #254510] Fri, 27 July 2007 00:26 Go to next message
rleishman
Messages: 3689
Registered: October 2005
Location: Melbourne, Australia
Senior Member
I've been looking at auditing and fine-grained auditing, and it seems that the lowest level of auditing supported is at the STATEMENT level.

Is this right? Is it possible to perform ROW LEVEL auditing on a table?

We have a regulatory requirement to load a privacy database with a log record per accessed row. This seems unlikely and non-scalable to me, as a full-table-scanwould load the entire table into the privacy database. Scary!

Ross Leishman
Re: Row-level auditing [message #254695 is a reply to message #254510] Fri, 27 July 2007 10:01 Go to previous messageGo to next message
DreamzZ
Messages: 1666
Registered: May 2007
Location: Dreamzland
Senior Member
Quote:
Is this right? Is it possible to perform ROW LEVEL auditing on a table?


YES.
Quote:
Fine-grained auditing is an excellent tool for tracking changes to individual rows and columns of data within database tables and views

http://www.databasejournal.com/features/oracle/article.php/3640201
Re: Row-level auditing [message #254809 is a reply to message #254695] Sat, 28 July 2007 08:18 Go to previous messageGo to next message
rleishman
Messages: 3689
Registered: October 2005
Location: Melbourne, Australia
Senior Member
But I think that "row level" is misleading.

My understanding is that you can TARGET an individual row for auditing, so that if a statement acts upon that row, the statement is audited.

When a statement is audited, I want to know all of the rows that it hit.

To put it another way, FGA appears only to create at most one audit row per audit policy per statement. I want many audit rows per audit policy per statement.

Ross Leishman
Re: Row-level auditing [message #262496 is a reply to message #254510] Mon, 27 August 2007 04:59 Go to previous messageGo to next message
muzahid
Messages: 281
Registered: September 2004
Location: Dhaka, Bangladesh
Senior Member
See the following link for row level security

http://www.securityfocus.com/infocus/1743
Re: Row-level auditing [message #262570 is a reply to message #262496] Mon, 27 August 2007 10:28 Go to previous messageGo to next message
DreamzZ
Messages: 1666
Registered: May 2007
Location: Dreamzland
Senior Member
Aww one month later Wink
Re: Row-level auditing [message #262572 is a reply to message #262570] Mon, 27 August 2007 10:31 Go to previous message
Michel Cadot
Messages: 58643
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
A Pete Finnigan paper always to be pointed. Cool

Note that part 2 is at: http://www.securityfocus.com/infocus/1744

Regards
Michel
Previous Topic: Urgent: Workstation identify
Next Topic: ORA-01950..........
Goto Forum:
  


Current Time: Fri Aug 01 19:50:25 CDT 2014

Total time taken to generate the page: 0.15603 seconds