RE: AUDIT_ACTIONS

And Note:99137.1 details how to drill down through system_privilege_map, et al. to find out what's going on.

Scott Shafer
San Antonio, TX
210-581-6217

> -----Original Message-----
> From: Godlewski, Melissa [SMTP:Melissa.Godlewski_at_hq.doe.gov]
> Sent: Thursday, April 25, 2002 4:21 PM
> To: Multiple recipients of list ORACLE-L
> Subject: RE: AUDIT_ACTIONS
>
> Below explanation from Metalink.
>
> If something is being audited by session, then there are four values
> that determine if the same record is updated or a new record is inserted.
>
> Two of these values are the session id and the object id of the object the
> action is against. The third value is the constant action code 103 - this
> is used to show that this is a session record. The final value is the
> privs used. This has to match with the record already in the audit trail -
> i.e. if it is null, then the existing record must also be null. If it is
> non-null, then the existing record must have the same non-null value.
>
> So, assuming the privs remain the same, all actions on one object go into
> one record. This includes insert, update, delete etc. Hence we can now see
> why the action name can't be anything other than SESSION REC as the record
> has to represent all the actions possible on the object."
>
> -----Original Message-----
> From: Suzy Vordos [ <mailto:lvordos_at_qwest.com>]
> Sent: Thursday, April 25, 2002 1:49 PM
> To: Multiple recipients of list ORACLE-L
> Subject: Re: AUDIT_ACTIONS
>
>
>
> select * from audit_actions where action=103; shows SESSION REC but not
> sure what that means....
>
> Charlie Mengler wrote:
> >
> > 103 SESSION REC
> >
> > I see entries in one of my AUD$ tables with a ACTION = 103
> > I'd like to know exactly what this action references.
> > I've searched my 8i online doc set but got no hits.
> >
> > I'm willing to RTFM is somebody will point me at which FM
> > I should use in this case.
> >
> > TIA & HAND!
> >
> > --
> > Charlie Mengler Maintenance Warehouse
> > charliem_at_mwh.com 10641 Scripps Summit Ct.
> > 858-831-2229 San Diego, CA 92131
> > Am I sure? Of course I'm sure. I could be wrong, but I'm sure for now!
> > --
> > Please see the official ORACLE-L FAQ: <http://www.orafaq.com>
> > --
> > Author: Charlie Mengler
> > INET: charliem_at_mwh.com
> >
> > Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> > San Diego, California -- Public Internet access / Mailing Lists
> > --------------------------------------------------------------------
> > To REMOVE yourself from this mailing list, send an E-Mail message
> > to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB ORACLE-L
> > (or the name of mailing list you want to be removed from). You may
> > also send the HELP command for other information (like subscribing).
> --
> Please see the official ORACLE-L FAQ: <http://www.orafaq.com>
> --
> Author: Suzy Vordos
> INET: lvordos_at_qwest.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: Scott.Shafer_at_dcpds.cpms.osd.mil

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).