fga policy on oracle 10.2.0.4 enterprise windows 2003

From: dba cjb <chris.brown_at_providentinsurance.co.uk>
Date: Thu, 30 Sep 2010 02:53:03 -0700 (PDT)
Message-ID: <4d42c681-5876-4b14-b64d-3497c8e242c4_at_30g2000yqm.googlegroups.com>



I would like to create a policy that checks on selects on an object ...but restrict entries for a particular user

eg audit selects on octopus.claim but only for user NTSERVER\BSDCHRISB

Is this OS_USER restriction do-able?

I have tried following code without success

BEGIN
DBMS_FGA.ADD_POLICY(

object_schema   => 'OCTOPUS',
object_name     => 'claim',
policy_name     => 'new_os',

audit_condition => 'SYS_CONTEXT(USERENV,OS_USER) = NTSERVER\BSD- CHRISB',
statement_types => 'SELECT');
END;
/

cheers
Chris B Received on Thu Sep 30 2010 - 04:53:03 CDT

Original text of this message