"Ess Wiego" <swiego_at_hotmail.com> wrote in message
news:936daf3f.0410091114.4b3f0c95_at_posting.google.com...
> What are some best practices vis-a-vis auditing DBAs? I initially
> enabled FGA due to some concerns about DBAs seeing certain data sets
> that they should not be seeing, but direct path export does not export
> FGA and a DBA could simply delete the trail from sys.fga_log$ anyway.
Nobody should be using "sys" to login to the database. You could use
auditing to os files but it requires some kind of scripts to
develop reporting capabilities. It will be cumbersome. This is just about
auditing "DBA" account.
Received on Sat Oct 09 2004 - 19:28:07 CDT
