That will be Fine Grained Auditing (FGA) not, Access. Fine grained Access Control (FGAC) or Virtual Private Database (VPD) provide a view of the table that the user is authorized to access, even for updates, inserts and deletes. You want more an audit mechanism.
However, FGA is bit of an overkill in your case. It's typically the only solution for auditing the seelct statements. For changes (insert/update/delete), you could employ the regular auditing (AUDIT). that will tell you who changed something, but not what. To see the what, you could use log miner to unearth those statements with the data. If you do use FGA, use it alongwith the Flashback Queries to findout the value of the columns before the change. And note, FGA is available only in 9i; so if you are using 8i, the better option is to use a simple user written trigger to populate an audit table. HTH. Arup Nanda www.proligence.com ----- Original Message ----- To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]> Sent: Wednesday, July 02, 2003 9:20 AM > Hi list > > We have a dozen authorisation tables who are visibible for end-users and > changeable for application owners. > What our security officer wants is that he can see who changed something in > those tables (including timestamp and update statement) > Is FGA the solution for this ? > Anyone with a few tips/hints how to do this with FGA ? > > thanks > > > > > vr.gr. > Geo Kor > Sr. System Engineer I&DM Db > RDW Voertuiginformatie en -toelating > Ict Bedrijf > Holland > * [EMAIL PROTECTED] > > > > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.net > -- > Author: > INET: [EMAIL PROTECTED] > > Fat City Network Services -- 858-538-5051 http://www.fatcity.com > San Diego, California -- Mailing list and web hosting services > --------------------------------------------------------------------- > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). > -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Arup Nanda INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
