Re: access to dbms_fga package on shared server

From: <fitzjarrell_at_cox.net>
Date: Mon, 12 May 2008 08:30:53 -0700 (PDT)
Message-ID: <e5a649a0-d19f-45fd-954c-42d17f77600c@56g2000hsm.googlegroups.com>


On May 12, 9:03 am, maxim2k <maxi..._at_gmail.com> wrote:
> On 5/12/08 3:30 PM, fitzjarr..._at_cox.net wrote:
>
> > I can only presume this access is through the schema owner.  Is this
> > the ONLY account accessing this users objects?
>
> Yes, each customer has an Oracle user/schema.
>
> > Which should not be an issue.  My question is this: if there is only
> > ONE user account which  can access these user objects what good does
> > having execute privilege on dbms_fga provide?  This is used to provide
> > Fine-Grained Access (fga) to database objects based upon a user id.
> > If only ONE user id accesses these objects I can see no purpose in
> > granting access to this package.
>
> I think the customer needs to create an audit log of actions performed
> over database objects. Is there a way to do that without using the
> dbms_fga package?
>
> Thanks.

That depends upon what you want to accomplish with this audit trail, this may give you some ideas on how to proceed depending upon the desired result:

http://oratips-ddf.blogspot.com/2006/05/audit-this.html

David Fitzjarrell Received on Mon May 12 2008 - 10:30:53 CDT

Original text of this message