fga policy on oracle 10.2.0.4 enterprise windows 2003
From: dba cjb <chris.brown_at_providentinsurance.co.uk>
Date: Thu, 30 Sep 2010 02:53:03 -0700 (PDT)
Message-ID: <4d42c681-5876-4b14-b64d-3497c8e242c4_at_30g2000yqm.googlegroups.com>
I would like to create a policy that checks on selects on an object ...but restrict entries for a particular user
audit_condition => 'SYS_CONTEXT(USERENV,OS_USER) = NTSERVER\BSD- CHRISB',
statement_types => 'SELECT');
END;
/
Date: Thu, 30 Sep 2010 02:53:03 -0700 (PDT)
Message-ID: <4d42c681-5876-4b14-b64d-3497c8e242c4_at_30g2000yqm.googlegroups.com>
I would like to create a policy that checks on selects on an object ...but restrict entries for a particular user
eg audit selects on octopus.claim but only for user NTSERVER\BSDCHRISB
Is this OS_USER restriction do-able?
I have tried following code without success
BEGIN
DBMS_FGA.ADD_POLICY(
object_schema => 'OCTOPUS', object_name => 'claim', policy_name => 'new_os',
audit_condition => 'SYS_CONTEXT(USERENV,OS_USER) = NTSERVER\BSD- CHRISB',
statement_types => 'SELECT');
END;
/
cheers
Chris B
Received on Thu Sep 30 2010 - 04:53:03 CDT