Home » RDBMS Server » Security » Auditing changes/updates to a table....
Auditing changes/updates to a table.... [message #27452] Mon, 06 October 2003 09:39 Go to next message
Navin
Messages: 31
Registered: May 2002
Member
Hi,

What is the best way to audit changes/updates to the table below?

Dev>desc emp
Name Null? Type
----------------- -------- ------------
EMPNO NUMBER
ENAME VARCHAR2(100)
SAL NUMBER
DEPT NUMBER
MODIFIED_BY VARCHAR2(50)
MODIFIED_DATE DATE

I can write a trigger to capture :new, :old values and populate a table.
For some reasons we do not want to user a trigger.

I was wondering if I can use DBMS_FGA to do the same. Our database is on 9i.

When ever ename, sal, dept is changed/modified/UPDATED, log old value,
new value and the user who changed it. Is is possible to audit/track UPDATEs
with DBMS_FGA, if yes, how can I do that OR
what would be the best to track such changes.

The GUI captures, the modified_by field.

Thank you so much.

Rachna
Re: Auditing changes/updates to a table.... [message #27453 is a reply to message #27452] Mon, 06 October 2003 10:28 Go to previous message
Thiru
Messages: 1089
Registered: May 2002
Senior Member
Rachna, you may also want to look at 9i workspace manager that can track data changes for you when you version-enable a table. See my previous posting regarding this.

Why dont you want to use a trigger for update on those columns ?

I have used Virtual Private database(ie Row level security in 8i, now FGA in 9i ) to some extent, but as far as I can tell ,it can provide fine grained access control auditing depending on the user's query and his context.It can attach the security policy right to the table and attach user defined predicate to the end-user's query to streamline data access. I am not sure if it can record old and new values like a trigger although you can associate your custom procedures as security policy.

-Thiru

Previous Topic: Audit access on a MV
Next Topic: Row level security
Goto Forum:
  


Current Time: Sat Aug 08 19:13:02 CDT 2020