| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> RE: fine grained access
FGA/VPD/RLS(*) is not a candidate solution to your problem. FGA via RLS is more for access control (who has permissions to see the records) rather than keeping track of who has exercised their access rights. Oracle's auditing may not provide the level of detail that you want, so your best bet is to write your own insert and update triggers, and possibly delete triggers that inserts into some other table too if you want to know who deleted what record when.
(*) VPD=Virtual Private Database; RLS=Row Level Security. Basically the same stuff based on which Oracle blurb you happen to have read.
-----Original Message-----
Sent: Wednesday, July 02, 2003 9:21 AM
To: Multiple recipients of list ORACLE-L
Hi list
We have a dozen authorisation tables who are visibible for end-users and
changeable for application owners.
What our security officer wants is that he can see who changed something in
those tables (including timestamp and update statement)
Is FGA the solution for this ?
Anyone with a few tips/hints how to do this with FGA ?
thanks
vr.gr.
Geo Kor
Sr. System Engineer I&DM Db
RDW Voertuiginformatie en -toelating
Ict Bedrijf
Holland
* [EMAIL PROTECTED]
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author:
INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services ---------------------------------------------------------------------To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services ---------------------------------------------------------------------To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Wed Jul 02 2003 - 12:16:38 CDT
 |
 |