Auditing a specific user for their session

Question

Is it possible to enable/disable auditing for a user in a way similar to enabling/disabling a role?
What I'm trying to do is - enable auditing for a user when they login to an application (where the application enables it's roles via an application based role - (role identified using a package)) and - when the user logs out have auditing automatically 'disable'.
I'm not sure if this is possible. Any insight/suggestions are greatly appreciated.
Thanks!

Answer 1

If I am understanding your question correctly, you can use fine grained auditing for this. As far as I know, you can't conditionally audit using regular constructs. You can do something like...
begin
  dbms_fga.add_policy(object_schema   => 'YOUR_USER',
                      object_name     => 'YOUR_TABLE',
                      policy_name     => 'YOUR_TABLE_AUDIT',
                      audit_condition => 'sys_context(''userenv'',''os_user'') = ''howards''',
                      audit_column    => 'YOUR_COLUMN');
end;
/This will create an audit record in dba_fga_audit_trail whenever the os_user howards selects the given column from the given table. If the same database user executes the select while connected to os_user 'raymond', the select won't be audited.
Some of the sys_context parameters are easily spoofed, but the idea should hold true no matter how you evaluate the session.