Audit specific objects for specific users

audit statement has the option to choose audit by user list
audit object has the option to choose audited objects
now i need to audit specific objects, i.e. user A's tables accessed by a specific group of users, let's say ALL users other than A
Is it a simple way to achieve this goal? (audit A's tables that accessed by all database users other than A)
Thanks!

sorry, the link works now. However, there is nothing new in 10G, same as I read from 9i document. See my highlight below in the quoted document text, my requirements is the combination of them ( specific users and specific objects). Thanks anyway.
<quote
Table 8-1 Auditing Types and Descriptions
Type of Auditing (link to discussion)      Meaning/Description
Statement Auditing      Enables you to audit SQL statements by type of statement, not by the specific schema objects on which they operate. Typically broad, statement auditing audits the use of several types of related actions for each option. For example, AUDIT TABLE tracks several DDL statements regardless of the table on which they are issued. You can also set statement auditing to audit selected users or every user in the database.
Privilege Auditing
     Enables you to audit the use of powerful system privileges that enable corresponding actions, such as AUDIT CREATE TABLE. Privilege auditing is more focused than statement auditing, which audits only a particular type of action. You can set privilege auditing to audit a selected user or every user in the database.
Schema Object Auditing
     Enables you to audit specific statements on a particular schema object, such as AUDIT SELECT ON employees. Schema object auditing is very focused, auditing only a single specified type of statement (such as SELECT) on a specified schema object. Schema object auditing always applies to all users of the database.
Fine-Grained Auditing
     Enables you to audit at the most granular level, data access and actions based on content, using any Boolean measure, such as value > 1,000,000. Enables auditing based on access to or changes in a column.
/quote>

Similar Messages

  • How to activate all inactive objects for current user

    Hi
    How to activate all inactive objects for current user ...
    ... I have found a (long winded) way to do this:
    - Environment / Inactive Objects
    - Add to Worklist
    - Display Worklist
    - Select All
    - Activate
    this will open a dialog titled "Inactive Objects for <username>"
    which has the exact functionality I need ... but I can't figure out how to get to this dialog directly - without so many intermediate steps
    the SAP docs repeatedly mention the ability to activate the inactive worklist - but do not mention how
    does anybody know the TCode for this dialog?
    thanks
    ps does the term "mass activation" apply to importing change requests rather than development activation?
    Edited by: FireBean500 on Jun 4, 2010 11:07 PM

    No other way. But usually it's far more simple as all objects are already in our own worklist.
    I wonder why your objects are not already in your worklist, as everytime you create or maintain an object, it is added to your worklist.

  • IWDClientUser Object for Other  User not the Logged In one

    Hi
    I am using Uploading a file to KM using Webdynpro,
    But i don't have permissions for all the users to create file in KM
    Now,
    in the program irrespective of the logged in user, i want to get
    IResourceContext object for different user who have the permissions.
    so that i can create a file in KM.
    I am using the code.
    IWDClientUser wdClientUser = WDClientUser.getClientUser("J2EE_ADMIN");
    com.sap.security.api.IUser sapUser = wdClientUser.getSAPUser();
    com.sapportals.portal.security.usermanagement.IUser ep5User = WPUMFactory.getUserFactory().getEP5User(sapUser);
    IResourceContext resourceContext = new ResourceContext(ep5User);
    the first statement is fetching IWDClientUser Object as the logged in user but not the J2EE_ADMIN.
    Need Help!!.
    Regards
    Abhimanyu L
    Message was edited by:
            Abhimanyu Lagishetti

    Solved
    There are service Users in portal i have used cmadmin_service user instead j2ee_admin and it works.
    Regards
    Abhimanyu L

  • How to delete all objects for one user from SE80

    Hi all,
    If i want to delete the customer objects defined in the customer space Y or Z from SE80. Object of one user is defined in one package, if i want to delete the pakcage it says, it contain the subobject. So can anybody help me how to delete the customer objects from SE80.
    Your response will be highly rewared.
    Tahnks,
    Salahuddin.

    hi
    good
    i think here you want to delege the development class, if you want to delete the particular development class you have to go for se09 where after selecting the particular development class you can select the delete button.
    thanks
    mrutyun

  • Java Objects for Oracle datatypeJava Objects for Oracle user-defined datatype

    I'm trying to create a Java object that maps to VARRAY of numbers.
    I created a type "NUMARRAY" which is a varray of numbers.
    I also created a type "NUMCOLLECTION" which is an object and contains "NUMARRAY"
    The plan was to create the java object to map to numcollection. My question is can I map a java type directly to the NUMARRAY type, or must it map to an object? (here I'm referring to 'CREATE TYPE NUMARRAY AS VARRAY" or "CREATE TYPE NUMCOLLECTION AS OBJECT" in sql.
    Also, if I do need to write java objects for both types? And if I do, do both need to implement SQLData?
    I'm trying to create a Java object that maps to VARRAY of numbers.
    I created a type "NUMARRAY" which is a varray of numbers.
    I also created a type "NUMCOLLECTION" which is an object and contains "NUMARRAY"
    The plan was to create the java object to map to numcollection. My question is can I map a java type directly to the NUMARRAY type, or must it map to an object? (here I'm referring to 'CREATE TYPE NUMARRAY AS VARRAY" or "CREATE TYPE NUMCOLLECTION AS OBJECT" in sql.
    Also, if I do need to write java objects for both types? And if I do, do both need to implement SQLData?
    Does anyone have an example? Your expertise would be much appreciated.
    Thanks,
    Roxanne
    null

    Hi Roxanne,
    I have the same problem if you get an idea or answer..I have a problem in updating and inserting in Varray datatype from java object of Objects (arraylist)..
    please mail me
    [email protected]
    Bye
    I created a type "NUMARRAY" which is a varray of numbers.
    I also created a type "NUMCOLLECTION" which is an object and contains "NUMARRAY"
    The plan was to create the java object to map to numcollection. My question is can I map a java type directly to the NUMARRAY type, or must it map to an object? (here I'm referring to 'CREATE TYPE NUMARRAY AS VARRAY" or "CREATE TYPE NUMCOLLECTION AS OBJECT" in sql.
    Also, if I do need to write java objects for both types? And if I do, do both need to implement SQLData?
    I'm trying to create a Java object that maps to VARRAY of numbers.
    I created a type "NUMARRAY" which is a varray of numbers.
    I also created a type "NUMCOLLECTION" which is an object and contains "NUMARRAY"
    The plan was to create the java object to map to numcollection. My question is can I map a java type directly to the NUMARRAY type, or must it map to an object? (here I'm referring to 'CREATE TYPE NUMARRAY AS VARRAY" or "CREATE TYPE NUMCOLLECTION AS OBJECT" in sql.
    Also, if I do need to write java objects for both types? And if I do, do both need to implement SQLData?
    Does anyone have an example? Your expertise would be much appreciated.
    Thanks,
    Roxanne
    null

  • Auditing Specific user in 9i

    How do v audit the dmls (all : select,insert,delete &update) on a particular schema and particular table by a user, who had the previlege to do.

    Hi,
    Steps to do audit trial:
    (1) Turn the auditing on: AUDIT_TRAIL = true in init.ora
    (2) Restart the instance if its running.
    (3) Audit the table:
         AUDIT INSERT,SELECT,DELETE,UPDATE ON TableName
         BY ACCESS WHENEVER SUCCESSFUL
    (4) Get the desired information using :
         SELECT OBJ_NAME,ACTION_NAME ,
    to_char(timestamp,'dd/mm/yyyy , HH:MM:SS')
         from sys.dba_audit_object;

  • Instead of creating new resource, recon is updating the same resource object for a user

    Hi,
    I created a DB target recon in OIM 11g. I ran recon and it created resource object. Resource is visible in Accounts tab.Now, I added one more entry with different description in DB. I ran the recon again. This time, instead of creating new resource object, recon linked it the same user with same resource object.
    My requirement is to create as many resource object as there are entries in DB table. The recon should not link all DB entries with same resource object in IDM. For every entry in DB, recon should create that many resource objects in accounts tab of user.
    Please let me know how to achieve the same.
    Regards,
    Kalpana.

    Hint is : Verify Reconciliation Key field mapping in Process definition
    Thanks,
    Pallavi

  • Objects for Planning User in BI7

    Hi All,
    Can any body please advise, what all objects are required in a Role for a Planning User.
    Also, what mandatory things to be maintained in RSECADMIN..!
    Thanks a lot.
    Venkat

    Hi Abhijit,
    I tryed how you suggested. With Transaction SU53 I have no result (authorization is correct), I tryed then with transaction ST01 but I have some problem to understand the following log (with RC=12, VENTOLA2 is the user).
    RSTTBOBJ=TRACE;USER=VENTOLA2;ACTVT=01
    RSPLS_SEQ=ZSG_FOR1;ACTVT=16;
    RSPLS_SEQ=ZSG_FOR1;ACTVT=16;
    RSPLS_SEQ=ZSG_FOR1;ACTVT=16;
    RSTTBOBJ=TRACE;USER=VENTOLA2;ACTVT=01
    RSTTBOBJ=TRACE;USER=VENTOLA2;ACTVT=01
    RSTTBOBJ=TRACE;USER=VENTOLA2;ACTVT=01
    RSTTBOBJ=TRACE;USER=VENTOLA2;ACTVT=01
    RSTTBOBJ=TRACE;USER=VENTOLA2;ACTVT=01
    RSTTBOBJ=TRACE;USER=VENTOLA2;ACTVT=01
    RSTTBOBJ=TRACE;USER=VENTOLA2;ACTVT=01
    RSTTBOBJ=TRACE;USER=VENTOLA2;ACTVT=01
    What kind of authorization object I should use. Consider that VENTOLA2 is a reporting user.
    Thanks in advance
    Massimo

  • System object with same credentials for all users?

    Hi everyone
    I would like to create a system object in Portal, which can be used by users in a specific group. However, I want all users to use the same credentials for this system. Is this possible?
    I've tried creating systems, but they all seem to require user mapping to work correctly. Is there some way I can create a system object with the credentials as part of the object, and then just assign permissions to it as required?
    Please let me know if this raises any questions.
    Thanks
    Stuart

    i dont think it is possible to create a system object for all the users with same credentials.anyways you are trying to create system object for some users who belong to a particular group.so you need to do only one time user mapping for that group
    go to user administration-search for the group-go to user mapping tab-give username and password..
    reward points if helpful

  • How do you log out a specific user

    We have a system page in our application that displays all the users currently logged into the system. This page can be accessed by developers and administrators. On this page we want the ability to be able to force a particular user to be logged out.
    So, if I am logged in as administrator JoeSchmo and I want to purge JaneDoe from the system, is there a way to do this? The logout and invalidate methods are for the current request object which would be for the current user and not a different user logged into the system so I am not even sure if what I am asking is possible. Thanks for the help.

    Hi,
    The specific solution would take into consideration the specifics of the web application, but from the web application container point of view the proper thing would be to invalidate the users session. To do this, you will have to keep track of all the sessions (this is the HttpSession object) for all users that are currently logged in, and invalidate it to force the re-login of the user.
    Regards,
    lg

  • Mandatory Authorization object for the BO user

    Dear All
    I am facing some problem for the BO user.
    can you let me know what are mandatory Authorization object for BO user to run the dashboard without error.
    Fast reply appreciate.
    Thanks
    Haji

    Dear All
    i am working for Analysis Authorization.
    i included Analysis Authorisation object  to the user.
    S_RS_AUTH  BI Analysis Authorizations in Role.
    when i checked in the BW side its working fine.
    when i checked the user in the BO side.
    filter values are coming correct, but the values in the column are not showing.
    its throwing an error.
    kindly help me to solve this issue.
    Thanks
    Haji

  • How to Generate Audit table entries for user navigation in ADF application?

    Hi all,
    I have a requirement that I need to have audit table entries for each user action in my application. Along with entries for user actions like insertion,deletion and updation I also need to have entries in the audit log even when a user simply navigates to or views any page.
    Although I was successful in creating the entries for user actions like insertion,deletion and updation I failed to do so for simple user navigation through the pages.
    Can anyone please help me out?
    Thanks in advance,
    Arijit

    Hi,
    Thanks for the quick reply. I am using JSF for my ADF application.Could u please elaborate how to use the PhaseListener for Auditing user navigation?
    Arijit

  • How to restrict login for multiple users having same Role

    Our Web Application is deployed on Tomcat 5.5
    The requirement is ?
    There are roles in application like "operator", "admin"?
    There are multiple users created for each of the above role.
    When one user of "operator" role is logged in, then
    It should not allow to login for another user of "operator" role.
    Also, if user did not log out & application gets close, then
    It should not allow to login for another user of "operator" role.
    Also, it should not allow to login for multiple requests of same user
    (using another browser instance...)
    Is it possible using session object?
    But, using session object, it will create separate objects for different users,
    So here I will not be able to restrict session object creation rolewise.
    Also, how to retrieve these multiple session objects created for different users on server?
    If anyone is having the solution please reply as soon as possible,
    Thank you.

    To tell you the truth, this is a stupid requirement. It must be an extremely fragile application.
    In any case, you will have to write your stuff for that. Probably a filter that on login, logout, and session expiration checks, makes, or removes entries in a DB (using a synchronized resource to prevent race conditions) or possibly even simply in an application context object.

  • Authorization Objects for Multiple Fields on a Screen

    Hi,
    I have a requirement to create authorization object on a screen with 20 fields and there are 3 users, each user for eg: User-A has rights to Display and modify a few fields and User-B has rights to diplay and modify a few fields and same is the case for the 3rd user, and there are some fields which all can modify.
    what i can do is create 2 authorization objects for each user one with all fields that he can modify & Display and other with all fields which he can display only. In this way i will have to create 6 authorization objects for 3 users, is there a way to reduce to 3, one for each user or even bring it down to 1 for all.
    Thanks,
    Thirumal

    Hi again,
    1. Thanks for the transparent example.
    2. Taking the same,
        it would be like this, in the program.
    ( u must agree that
    if there are six different cases,
    then there will be six different IF ENDIF
    in your program, for edit/display combination of fields)
    (you may also use GROUP1, GROUP2..GROUP4
    concept along with authorisation concept
    to group related fields )
    2. suppose user2 or user 1 has logged in.
    3. in the program,
       before displaying the fields,
      a) use authority-check
       with 1, 2 and check sy-subrc to know
       which VALUE (1,2) is there for rights.
       b)then, logic would be like this
          (for display/edit of all fields)
        IF value =  1.
        field1-visible = true
        field1-editable = true
        field2-visible = true
        field2-editable = true
         field3-visible = true
        field3-editable = true
       endif.
       if value = 2.
        field1-visible = true
        field1-editable = <b>false</b>
        field2-visible = true
        field2-editable = <b>false</b>
       endif.
    regards,
    amit m.

  • How the profile id has been created for anonymous user

    hi all,
    when i print the ShoppingCurrent.current the below line is displaying
    Order[type:default; id:o1030002; state:INCOMPLETE; transient:true; profileId:1310002; ]
    in that how the profile id has been created.
    thanks in advance
    shya

    User profile is created when a request is processed by the ProfileRequestServlet in the ATG servlet pipeline and is made available as session scoped Profile object for each user. Profile object has a dataSource property which points to the underlying RepositoryItem. For anonymous user, the underlying RepositoryItem created through ProfileRequestServlet remains transient by default. Therefore you won't find the item in the repository or database with that transient repository item's id. You can change this default behavior if you want by changing the persistentAnonymousProfiles property of the ProfileRequestServlet component to true which will create a new profile in the database for each anonymous visitor.

  • S_GUI RISK TO AUTHORITY 60 UPLOAD FOR ALL USERS

    What's the problem to permit authority 60 in ACTVT at S_GUI object for all users?
    Best regards.

    There may be some programs which aren't sufficiently protected against data-uploads but I've never seen any risk in it. Interesting question!

Maybe you are looking for

  • How can I link to a chapter in iBooks Author? I just want a link to the chapter, not to a bookmark

    How can I link to a chapter in iBooks Author? I just want a link to the chapter, not to a bookmark. But something like: "This was explained in Chapter 5." Where "Chapter 5" is a clickable hyperlink. Also, when I add a new chapter before chapter 5 thi

  • How can i get anonymox add on for android 2.3

    i wanna have add on 'ANONYMOX' on my android 2.3 htc amaze 4g

  • Help? get plus + (R) has stopped working when loading Flash player

    When trying to install flash player - I get this message and then it says a problem has stopped the programme working properly. Windows will close the programme and will notify me if a solution is possible. Now stuck as nothing happens Any advice?

  • My tx2 hard drive won't start!!! HELP!!!!

    My laptop is a a Tx2z-1000 is 2 1/2 years old. For the last 9 months or so its had this problem when booting up. My laptop will turn on but the hard drive won't turn on with it. O can hear the fans running and the rest of the computer trying to start

  • CIF Queries

    Helllo Experts,          Please clarify my CIF doubts. 1.What will be possible reason (Expect the volume of data) if the activation of integration models takes long run time and how can i trouble shoot it? 2.What will be the impact if I generate the