Re: How to parse OBJ_PRIVILEGE column of DBA_AUDIT_TRAIL in 19?

Hey Jeff,

If that's the case, then how do the 239 rows of that table translate to the 32 bytes of OBJ_PRIVILEGE column of the DBA_AUDIT_TRAIL view? The name values of the audit actions would seem to indicate a statement rather than the "Object privileges granted or revoked by a GRANT or REVOKE statement" as the documentation says.

Also, the documentation at
https://docs.oracle.com/en/database/oracle/oracle-database/19/refrn/DBA_AUDIT_TRAIL.html says that OBJ_PRIVILEGE is a VARCHAR2(16), but the dictionaries created on my 19.6 databases disagree.

Thanks,
Rich

On Wed, Jul 15, 2020 at 3:39 PM Jeff Smith <jeff.d.smith_at_oracle.com> wrote:

> This is the lookup table for those codes, Rich
>
>
>
> sys.audit_actions
>
>
>
> Jeff
>
>
>
>
>
> *From:* Rich J <rich242j_at_gmail.com>
> *Sent:* Wednesday, July 15, 2020 3:15 PM
> *To:* oracle-l_at_freelists.org
> *Subject:* Re: How to parse OBJ_PRIVILEGE column of DBA_AUDIT_TRAIL in 19?
>
>
>
> I think it's interesting that even Oracle Support doesn't know the answer
> to this. They keep giving me untested answers from Development, leaving me
> to (dis)prove them. It amazes me that I'm apparently the only one who has
> asked this question, as the documentation has been missing/wrong for
> several versions.
>
>
>
> I've come to the conclusion that I must not have auditing (traditional --
> not unified yet) configured correctly. That, or no one asks what privs
> were granted to trigger an audit row from being generated.
>
>
>
> Sigh.
>
>
>
> Rich
>
>
>
>
>
> On Wed, Jun 10, 2020 at 8:04 AM Rich J <rich242j_at_gmail.com> wrote:
>
> Hey all,
>
>
>
> Looking through DBA_AUDIT_TRAIL of a 19.6 database on OL7.7, I'm trying to
> decode the OBJ_PRIVILEGE column on rows with GRANT OBJECT in the
> ACTION_NAME column. The official doc on the view:
>
>
>
>
> https://docs.oracle.com/en/database/oracle/oracle-database/19/refrn/DBA_AUDIT_STATEMENT.html
>
>
>
> ...doesn't say what the column is. AskTom said in v9.2 that it mirrors
> the SES_ACTIONS column:
>
>
> https://asktom.oracle.com/pls/asktom/asktom.search?tag=how-to-track-logon-logout#45725388888922
>
>
>
> And that's what the v19 doc also says, but the OBJ_PRIVILEGE column is now
> 32 characters, and I've got hits on the upper columns.
>
>
>
> Anyone know where that documentation could be? FWIW, the docs for v20
> appear to be the same as the v19 ones for this.
>
>
>
> Thanks,
>
> Rich
>
>
>
>
>
>

--
http://www.freelists.org/webpage/oracle-l