Re: Auditing DBAs

From: Sybrand Bakker <sybrandb_at_hccnet.nl>
Date: Sun, 10 Oct 2004 15:45:48 +0200
Message-ID: <i7fim0hkloumfrmbn068fs28hma1cgasaf@4ax.com>

On 9 Oct 2004 12:14:35 -0700, swiego_at_hotmail.com (Ess Wiego) wrote:

>What are some best practices vis-a-vis auditing DBAs? I initially
>enabled FGA due to some concerns about DBAs seeing certain data sets
>that they should not be seeing, but direct path export does not export
>FGA and a DBA could simply delete the trail from sys.fga_log$ anyway.

By design the DBA can see everything. If you don't trust your DBAs fire them.

--
Sybrand Bakker, Senior Oracle DBA

Received on Sun Oct 10 2004 - 08:45:48 CDT