Re: access to dbms_fga package on shared server
Date: Mon, 12 May 2008 08:30:53 -0700 (PDT)
Message-ID: <e5a649a0-d19f-45fd-954c-42d17f77600c@56g2000hsm.googlegroups.com>
On May 12, 9:03 am, maxim2k <maxi..._at_gmail.com> wrote:
> On 5/12/08 3:30 PM, fitzjarr..._at_cox.net wrote:
>
> > I can only presume this access is through the schema owner. Is this
> > the ONLY account accessing this users objects?
>
> Yes, each customer has an Oracle user/schema.
>
> > Which should not be an issue. My question is this: if there is only
> > ONE user account which can access these user objects what good does
> > having execute privilege on dbms_fga provide? This is used to provide
> > Fine-Grained Access (fga) to database objects based upon a user id.
> > If only ONE user id accesses these objects I can see no purpose in
> > granting access to this package.
>
> I think the customer needs to create an audit log of actions performed
> over database objects. Is there a way to do that without using the
> dbms_fga package?
>
> Thanks.
That depends upon what you want to accomplish with this audit trail, this may give you some ideas on how to proceed depending upon the desired result:
http://oratips-ddf.blogspot.com/2006/05/audit-this.html
David Fitzjarrell Received on Mon May 12 2008 - 10:30:53 CDT