FGA/VPD/RLS(*) is not a candidate solution to your problem. FGA via RLS is more for access control (who has permissions to see the records) rather than keeping track of who has exercised their access rights. Oracle's auditing may not provide the level of detail that you want, so your best bet is to write your own insert and update triggers, and possibly delete triggers that inserts into some other table too if you want to know who deleted what record when.
(*) VPD=Virtual Private Database; RLS=Row Level Security. Basically the same stuff based on which Oracle blurb you happen to have read. -----Original Message----- Sent: Wednesday, July 02, 2003 9:21 AM To: Multiple recipients of list ORACLE-L Hi list We have a dozen authorisation tables who are visibible for end-users and changeable for application owners. What our security officer wants is that he can see who changed something in those tables (including timestamp and update statement) Is FGA the solution for this ? Anyone with a few tips/hints how to do this with FGA ? thanks vr.gr. Geo Kor Sr. System Engineer I&DM Db RDW Voertuiginformatie en -toelating Ict Bedrijf Holland * [EMAIL PROTECTED] -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Rudy Zung INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
