Auditing Changes to ERDs?

How do you set up auditing to ERDs? I would like to know who made the latest change on all ERDs - we have a few hundred ERDs total. I noticed if you go into the RON and click a diagram, one of the properties is 'Change History' How do you auto-populate this with the username who last modified the ERD?

Hi BrantEH:
SCOM does not natively include application-level role security reporting as you describe. Such a feature has been asked for in the past but never added to the product.
However, since all those actions require SCOM administrator access, you could use SCOM ACS to report when members of the SCOM admin group log on. To leverage this idea, perform all routine SCOM operations logged in a Operator or Advanced Operator roles.
When one of the auditable actions is needed, log in as SCOM admin, do the work and log off. With ACS installed and appropriate audit policies and reports created, you could get a daily report of SCOM admin logins. That would help you pin down which admin was
logged in when SCOM administrator event occurred.
You asked about third party utilities, perhaps something like Quest AD Auditor, etc. but I have no experience with those products used against SCOM.
Good luck,
John Joyner MVP-SC-CDM

Similar Messages

Table audit - changes

Hi All,
This is my first question, so please bear with me.
I am a developer for a certain company, and I am working with Peoplesoft Enterprise, and the databases are all Oracle's. I found out that some tables have triggers, where various changes are being inserted to another table. For example, changes on the table PS_JOB would be inserted to the table PS_AUDIT_JOB. If I am a database administrator and would update PS_JOB, my actions would also be reflected on PS_AUDIT_JOB.
Sometimes, weird stuff happens on employees' data, so we conduct backend investigation. There are times when the culprit turns out by looking at the audit table. But there are also times when no culprit is ever found. Since I'm kinda into conspiracy theory, I theorized that maybe some priviledged DBAs the power to update the audit table. That said, I searched for priviledges on some audit tables, and found out that some DBAs really do have the priviledges to perform update/delete on these tables.
So, my question is, is there another way to audit these audit tables for any more actions? (no more triggers on the audit tables)
Thanks in advance.

There is indeed a better way to audit these tables. You should use the database auditing feature of Oracle to do the auditing rather than triggers. You should set the AUDIT_TRAIL parameter to one of the OS methods and then turn auditing on for any tables that you want to monitor.
An even more robust solution would be to implement Oracle Audit Vault, which provides a secure, tamper-proof environment for your audit data (provided that you don't give your DBAs access to it).
Regards,
Iain Barr
Ategrity Solutions Ltd

BPC 7.5 NW SP06 - Audit changes made in DHE

Hello Experts,
As part of our month end process, we sometimes have to make changes in the DHE (change organization hierarchies, ownership percentages, etc).
I would like to know if there is a way in BPC Web Admin to track these changes using the Data audit or the Activity audit feature. I looked in the Web Admin (under both the Manage Activity Audit and Manage Data Audit) for my "Ownership" application, but was not able to figure it out. It would be really helpful if you can provide me some guidance in this regard.
Thanks,
Van.

Any takers please?
Thanks,
Van.

Auditing changes

I want to audit the changes to any procedure associated with a certain schema. It doesnt need to tell me what the changes were just the date and who did it and what procedure it was. If anyone can tell me how to get started on this i would appreciate it. Thanks.

In DBA_OBJECTS you can find the timestamp of the last DDL on any object in the DB, but to know who did it and the history, you have to activate AUDIT TRAIL, that is in your initSID.ora put a line like
audit_trail=db
or, if you use spfile :
SQL> alter system set audit_trail=db scope=spfile;
anyway you have to restart the DB. Then :
SQL> audit procedure by <schema name>;
In AUD$ or DBA_AUDIT_TRAIL you'll find details of audited events.

Adobe audition changement de langue

bonjour,
j'aimerais réinstaller adobe audition 3 en anglais, comment faire ? Actuellement il est installé en francais
merci

Albertgeorges there are no option to transfer your English license for Audition 3 to a French license. This option is only available for current software versions available from Adobe. You can find more details at Order product | Platform, language swap - http://helpx.adobe.com/x-productkb/policy-pricing/order-product-platform-language-swap.htm l.

Tamper Proof Way of Auditing Changes to Tables

I'm trying to find the best way to set up auditing on some of our SQL tables. Here are my requirements:
1. Audit specific tables for (primarily) update, insert, and delete events
2. Create email alerts based on events
3. Detect and alert if auditing is disabled or removed
So I am looking so far at either triggers or creating a SQL Audit and specifications (we have SQL 2008). My questions are, couldn't someone just disable the triggers, perform an update (for example) and then disable the trigger? Also, isn't it just
as easy to disable a SQL Audit? I would like to narrow it down to certain tables rather than an entire database but that's absolutely essential. Obviously, that's easy with triggers but do auditing specifications allow to target individual tables? I guess
my biggest problem is making sure that either method cannot be disabled without generating an alert. It's not that I don't trust our admins; it's just good practice. Anyhow, I appreciate your time in advance and I am open to suggestion.

Hmm, starting to look like an audit is the way to go as opposed to a trigger. I'd just need an event to be generated if the audit was disabled or deleted. Do you know if that's default behavior for audits?
That is indeed the behavior of Audit. Each Enable/Disable-Event will be logged into the same target.
Just keep in mind that if someone has access to the file that the target consists of, he can potentially tamper that.
Andreas Wolter (Blog |
Twitter)
MCSM: Microsoft Certified Solutions Master Data Platform, MCM, MVP
www.SarpedonQualityLab.com |
www.SQL-Server-Master-Class.com

Audit/Log GPO changes and Logging of new addition of Domain Controllers in the Event Log

Hi all,
We am trying to log the following items in the event log for Windows 2012. This applies to a domain controller.
1) Audit any changes made to the Group Policy
2) Log the addition of new domain controllers added to the system.
We need the windows event log to record the above events for security purposes. Can anyone advise if this is doable? If yes what are the steps.
Thank you

Hi,
>>1) Audit any changes made to the Group Policy
We can enable audit for directory service object access and configure specific SACL for group policy files to do this.
Regarding how to step-to-step guide for auditing changes of group policy, the following two blogs can be referred to for more information.
Monitoring Group Policy Changes with Windows Auditing
http://blogs.msdn.com/b/ericfitz/archive/2005/08/04/447951.aspx
Auditing Group Policy changes
http://blogs.msdn.com/b/canberrapfe/archive/2012/05/02/auditing-group-policy-changes.aspx
>>2) Log the addition of new domain controllers added to the system.
Based on my knowledge, when a server is successfully promoted to be domain controller, event ID 29223 will be logged in the System log.
Regarding this point, the following thread can be referred to for more information.
Is an Event ID for a completed Domain Controller promotion logged on the PDC?
https://social.technet.microsoft.com/Forums/windowsserver/en-US/11b18816-7db0-49e2-9a65-3de0e7a9645e/is-an-event-id-for-a-completed-domain-controller-promotion-logged-on-the-pdc?forum=winserverDS
Best regards,
Frank Shen

LMS 4.2 Change Audit Report

Hi,
The audit/compliance department at one of costumer wants to see the weekly config change audit report.
I have done many test with this feature and i found two problems:
1. The given report path is empty. Only the directories was made and there are not report files.
2. I can not send the report in attachment. How can i publish it automatically? Many reports have attachment option. It has not.
The immediately option is working but it does not make report. ( like .pdf )
How can i send audit change report autmatically to external costumer?
Regards,

Hi,
Sorry for late answer!
I did not config report path, i use the default path! ( i have tried another path setting also )
The screens show the following.
1, job info
2. job report view
If i use the immediatly options the report is good! Only the scheduled job does not make report!
Regards,

SQL Server 2000 auditing on DML changes on user tables to user databases

Please let me know if you know if there is any procedure or steps to determine DML changes on user tables in database.

Hello,
You can use triggers as shown in the following article:
http://sqlserver2000.databases.aspfaq.com/how-do-i-audit-changes-to-sql-server-data.html
You may also consider third party tools that may still support SQL Server 2000. The following tool supported SQL Server 2000 a few years
ago, not sure about today:
http://www.apexsql.com/sql_tools_comply.aspx
Server side traces may be another option:
http://msdn.microsoft.com/en-us/library/cc293613.aspx
Hope this helps.
Regards,
Alberto Morillo
SQLCoffee.com

Auditing permission changes of certain folder

I would like to audit certain files and folders on our file servers so I can setup a schedule task to send us emails when the permission get changed on two important folders we need to modify.
On both folders, I setup auditing for the everyone group and set it up so that it creates an event id of 4907 whe someone changes the permissions on the folder either by adding/removing groups or users as well as modify someones access rights.
After setting the auditing up on the folder, I added a few users to it and changed access rights but it did not register an event id of 4907 or any other type of event id.
I dug a bit deaper and the only time I will get notification in the event logs if something changed on the folder is if I add or remove someone from the auditing tab then it triggers the event id of 4907.
So what is the proper way of auditing a folder so that if someone changes the permissions on it, it will always log an entry in the event security log. Also what will the event id be.

Hi,
From following thread:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/e432ffca-7de1-42a6-9b6c-19e15175a764/how-to-audit-changed-permissions-on-ntfs-folders-the-best-way?forum=winserversecurity
You should get events 560, 562 by checking the check-boxes for Change permissions both "successful" and "failed".
If you have any feedback on our support, please send to [email protected]

Need to audit domain admin group changes

Hi
I have windows server 2012 domain controllers (4 Dcs). I want to audit changes happening to domain admin group. Recently somebody modified domain admin members. I want to trace out who did this ..
Please let me know how to check it...

Hi,
Checkout the below steps to enable auditing for AD User and Group Changes,
1. Open GPMC console, click Start --> Administrative Tools --> Group Policy Management.
2. Right click the Default Domain Controllers Policy, and then click Edit.
3. Go to the node DS Access (Computer Configuration/Policies/Windows Settings/Security Settings/Advanced Audit Policy Configuration/Audit Policies/DS Access.)
Enable Success auditing for the following settings
- Audit Directory Service Access
- Audit Directory Service Changes
4. Go to the node Account Management (Computer Configuration/Policies/Windows Settings/Security Settings/Advanced Audit Policy Configuration/Audit Policies/Account Management.)
Enable Success auditing for the following settings
- Audit User Account Management
- Audit Computer Account Management
- Audit Security Group Management
- Audit Distribution Group Management
After completing the audit settings, configure SACL in Active Directory Users and Computers console for enabling the geneartion of AD Change events in the eventlog as shown below,
Regards,
Gopi
JiJi
Technologies

Auditing DQS KBase changes

Does anyone know how to go about auditing changes to a KBase. I can see that we have A_KNOWLEDGEBASE_AUDIT and A_KNOWLEDGEBASE_ACTIVITY tables and I can see that a user processed an activity, I just cannot tell what they did

Hi
You can create auditing details for individual developers by creating design repository login for each developer in the team and that will allow you to query the audit view 'ALL_IV_OBJECTS' to get information regarding last deployment etc.
Cheers,
Sharad Srivastav

How to turn off this audit?

I see lots of auditing records getting generated with action# 85, i looked up, it is truncate table.
how can i turn it off?
the following are the current auditing option from this database. which one is generating this action# 85.
====
AUDIT ADMINISTER ANY SQL TUNING SET BY ACCESS ;
AUDIT ADMINISTER DATABASE TRIGGER BY ACCESS ;
AUDIT ADMINISTER SQL MANAGEMENT OBJECT BY ACCESS ;
AUDIT ADMINISTER SQL TUNING SET BY ACCESS ;
AUDIT ADVISOR BY ACCESS ;
AUDIT ALTER ANY ASSEMBLY BY ACCESS ;
AUDIT ALTER ANY CLUSTER BY ACCESS ;
AUDIT ALTER ANY CUBE BY ACCESS ;
AUDIT ALTER ANY CUBE DIMENSION BY ACCESS ;
AUDIT ALTER ANY DIMENSION BY ACCESS ;
AUDIT ALTER ANY EDITION BY ACCESS ;
AUDIT ALTER ANY EVALUATION CONTEXT BY ACCESS ;
AUDIT ALTER ANY INDEX BY ACCESS ;
AUDIT ALTER ANY INDEXTYPE BY ACCESS ;
AUDIT ALTER ANY LIBRARY BY ACCESS ;
AUDIT ALTER ANY MATERIALIZED VIEW BY ACCESS ;
AUDIT ALTER ANY MINING MODEL BY ACCESS ;
AUDIT ALTER ANY OPERATOR BY ACCESS ;
AUDIT ALTER ANY OUTLINE BY ACCESS ;
AUDIT ALTER ANY PROCEDURE BY ACCESS ;
AUDIT ALTER ANY ROLE BY ACCESS ;
AUDIT ALTER ANY RULE BY ACCESS ;
AUDIT ALTER ANY RULE SET BY ACCESS ;
AUDIT ALTER ANY SEQUENCE BY ACCESS ;
AUDIT ALTER ANY SQL PROFILE BY ACCESS ;
AUDIT ALTER ANY TABLE BY ACCESS ;
AUDIT ALTER ANY TRIGGER BY ACCESS ;
AUDIT ALTER ANY TYPE BY ACCESS ;
AUDIT ALTER DATABASE BY ACCESS ;
AUDIT ALTER DATABASE LINK BY ACCESS ;
AUDIT ALTER JAVA CLASS BY ACCESS ;
AUDIT ALTER JAVA RESOURCE BY ACCESS ;
AUDIT ALTER JAVA SOURCE BY ACCESS ;
AUDIT ALTER MINING MODEL BY ACCESS ;
AUDIT ALTER PROFILE BY ACCESS ;
AUDIT ALTER PUBLIC DATABASE LINK BY ACCESS ;
AUDIT ALTER RESOURCE COST BY ACCESS ;
AUDIT ALTER ROLLBACK SEGMENT BY ACCESS ;
AUDIT ALTER SEQUENCE BY ACCESS ;
AUDIT ALTER SESSION BY ACCESS ;
AUDIT ALTER SYSTEM BY ACCESS ;
AUDIT ALTER TABLE BY ACCESS ;
AUDIT ALTER TABLESPACE BY ACCESS ;
AUDIT ALTER USER BY ACCESS ;
AUDIT ANALYZE ANY BY ACCESS ;
AUDIT AUDIT ANY BY ACCESS ;
AUDIT AUDIT SYSTEM BY ACCESS ;
AUDIT BACKUP ANY TABLE BY ACCESS ;
AUDIT BECOME USER BY ACCESS ;
AUDIT CHANGE NOTIFICATION BY ACCESS ;
AUDIT CLUSTER BY ACCESS ;
AUDIT COMMENT ANY MINING MODEL BY ACCESS ;
AUDIT COMMENT ANY TABLE BY ACCESS ;
AUDIT COMMENT EDITION BY ACCESS ;
AUDIT COMMENT MINING MODEL BY ACCESS ;
AUDIT COMMENT TABLE BY ACCESS ;
AUDIT CONTEXT BY ACCESS ;
AUDIT CREATE ANY ASSEMBLY BY ACCESS ;
AUDIT CREATE ANY CLUSTER BY ACCESS ;
AUDIT CREATE ANY CONTEXT BY ACCESS ;
AUDIT CREATE ANY CUBE BY ACCESS ;
AUDIT CREATE ANY CUBE BUILD PROCESS BY ACCESS ;
AUDIT CREATE ANY CUBE DIMENSION BY ACCESS ;
AUDIT CREATE ANY DIMENSION BY ACCESS ;
AUDIT CREATE ANY DIRECTORY BY ACCESS ;
AUDIT CREATE ANY EDITION BY ACCESS ;
AUDIT CREATE ANY EVALUATION CONTEXT BY ACCESS ;
AUDIT CREATE ANY INDEX BY ACCESS ;
AUDIT CREATE ANY INDEXTYPE BY ACCESS ;
AUDIT CREATE ANY JOB BY ACCESS ;
AUDIT CREATE ANY LIBRARY BY ACCESS ;
AUDIT CREATE ANY MATERIALIZED VIEW BY ACCESS ;
AUDIT CREATE ANY MEASURE FOLDER BY ACCESS ;
AUDIT CREATE ANY MINING MODEL BY ACCESS ;
AUDIT CREATE ANY OPERATOR BY ACCESS ;
AUDIT CREATE ANY OUTLINE BY ACCESS ;
AUDIT CREATE ANY PROCEDURE BY ACCESS ;
AUDIT CREATE ANY RULE BY ACCESS ;
AUDIT CREATE ANY RULE SET BY ACCESS ;
AUDIT CREATE ANY SEQUENCE BY ACCESS ;
AUDIT CREATE ANY SQL PROFILE BY ACCESS ;
AUDIT CREATE ANY SYNONYM BY ACCESS ;
AUDIT CREATE ANY TABLE BY ACCESS ;
AUDIT CREATE ANY TRIGGER BY ACCESS ;
AUDIT CREATE ANY TYPE BY ACCESS ;
AUDIT CREATE ANY VIEW BY ACCESS ;
AUDIT CREATE ASSEMBLY BY ACCESS ;
AUDIT CREATE CLUSTER BY ACCESS ;
AUDIT CREATE CUBE BY ACCESS ;
AUDIT CREATE CUBE BUILD PROCESS BY ACCESS ;
AUDIT CREATE CUBE DIMENSION BY ACCESS ;
AUDIT CREATE DATABASE LINK BY ACCESS ;
AUDIT CREATE DIMENSION BY ACCESS ;
AUDIT CREATE EVALUATION CONTEXT BY ACCESS ;
AUDIT CREATE EXTERNAL JOB BY ACCESS ;
AUDIT CREATE INDEXTYPE BY ACCESS ;
AUDIT CREATE JAVA CLASS BY ACCESS ;
AUDIT CREATE JAVA RESOURCE BY ACCESS ;
AUDIT CREATE JAVA SOURCE BY ACCESS ;
AUDIT CREATE JOB BY ACCESS ;
AUDIT CREATE LIBRARY BY ACCESS ;
AUDIT CREATE MATERIALIZED VIEW BY ACCESS ;
AUDIT CREATE MEASURE FOLDER BY ACCESS ;
AUDIT CREATE MINING MODEL BY ACCESS ;
AUDIT CREATE OPERATOR BY ACCESS ;
AUDIT CREATE PROCEDURE BY ACCESS ;
AUDIT CREATE PROFILE BY ACCESS ;
AUDIT CREATE PUBLIC DATABASE LINK BY ACCESS ;
AUDIT CREATE PUBLIC SYNONYM BY ACCESS ;
AUDIT CREATE ROLE BY ACCESS ;
AUDIT CREATE ROLLBACK SEGMENT BY ACCESS ;
AUDIT CREATE RULE BY ACCESS ;
AUDIT CREATE RULE SET BY ACCESS ;
AUDIT CREATE SEQUENCE BY ACCESS ;
AUDIT CREATE SESSION BY ACCESS ;
AUDIT CREATE SYNONYM BY ACCESS ;
AUDIT CREATE TABLE BY ACCESS ;
AUDIT CREATE TABLESPACE BY ACCESS ;
AUDIT CREATE TRIGGER BY ACCESS ;
AUDIT CREATE TYPE BY ACCESS ;
AUDIT CREATE USER BY ACCESS ;
AUDIT CREATE VIEW BY ACCESS ;
AUDIT DATABASE LINK BY ACCESS ;
AUDIT DEBUG ANY PROCEDURE BY ACCESS ;
AUDIT DEBUG CONNECT SESSION BY ACCESS ;
AUDIT DEBUG PROCEDURE BY ACCESS ;
AUDIT DELETE ANY CUBE DIMENSION BY ACCESS ;
AUDIT DELETE ANY MEASURE FOLDER BY ACCESS ;
AUDIT DELETE ANY TABLE BY ACCESS ;
AUDIT DEQUEUE ANY QUEUE BY ACCESS ;
AUDIT DIMENSION BY ACCESS ;
AUDIT DIRECTORY BY ACCESS ;
AUDIT DROP ANY ASSEMBLY BY ACCESS ;
AUDIT DROP ANY CLUSTER BY ACCESS ;
AUDIT DROP ANY CONTEXT BY ACCESS ;
AUDIT DROP ANY CUBE BY ACCESS ;
AUDIT DROP ANY CUBE BUILD PROCESS BY ACCESS ;
AUDIT DROP ANY CUBE DIMENSION BY ACCESS ;
AUDIT DROP ANY DIMENSION BY ACCESS ;
AUDIT DROP ANY DIRECTORY BY ACCESS ;
AUDIT DROP ANY EDITION BY ACCESS ;
AUDIT DROP ANY EVALUATION CONTEXT BY ACCESS ;
AUDIT DROP ANY INDEX BY ACCESS ;
AUDIT DROP ANY INDEXTYPE BY ACCESS ;
AUDIT DROP ANY LIBRARY BY ACCESS ;
AUDIT DROP ANY MATERIALIZED VIEW BY ACCESS ;
AUDIT DROP ANY MEASURE FOLDER BY ACCESS ;
AUDIT DROP ANY MINING MODEL BY ACCESS ;
AUDIT DROP ANY OPERATOR BY ACCESS ;
AUDIT DROP ANY OUTLINE BY ACCESS ;
AUDIT DROP ANY PROCEDURE BY ACCESS ;
AUDIT DROP ANY ROLE BY ACCESS ;
AUDIT DROP ANY RULE BY ACCESS ;
AUDIT DROP ANY RULE SET BY ACCESS ;
AUDIT DROP ANY SEQUENCE BY ACCESS ;
AUDIT DROP ANY SQL PROFILE BY ACCESS ;
AUDIT DROP ANY SYNONYM BY ACCESS ;
AUDIT DROP ANY TABLE BY ACCESS ;
AUDIT DROP ANY TRIGGER BY ACCESS ;
AUDIT DROP ANY TYPE BY ACCESS ;
AUDIT DROP ANY VIEW BY ACCESS ;
AUDIT DROP JAVA CLASS BY ACCESS ;
AUDIT DROP JAVA RESOURCE BY ACCESS ;
AUDIT DROP JAVA SOURCE BY ACCESS ;
AUDIT DROP PROFILE BY ACCESS ;
AUDIT DROP PUBLIC DATABASE LINK BY ACCESS ;
AUDIT DROP PUBLIC SYNONYM BY ACCESS ;
AUDIT DROP ROLLBACK SEGMENT BY ACCESS ;
AUDIT DROP TABLESPACE BY ACCESS ;
AUDIT DROP USER BY ACCESS ;
AUDIT ENQUEUE ANY QUEUE BY ACCESS ;
AUDIT EXECUTE ANY ASSEMBLY BY ACCESS ;
AUDIT EXECUTE ANY CLASS BY ACCESS ;
AUDIT EXECUTE ANY EVALUATION CONTEXT BY ACCESS ;
AUDIT EXECUTE ANY INDEXTYPE BY ACCESS ;
AUDIT EXECUTE ANY LIBRARY BY ACCESS ;
AUDIT EXECUTE ANY OPERATOR BY ACCESS ;
AUDIT EXECUTE ANY PROCEDURE BY ACCESS ;
AUDIT EXECUTE ANY PROGRAM BY ACCESS ;
AUDIT EXECUTE ANY RULE BY ACCESS ;
AUDIT EXECUTE ANY RULE SET BY ACCESS ;
AUDIT EXECUTE ANY TYPE BY ACCESS ;
AUDIT EXECUTE ASSEMBLY BY SESSION ;
AUDIT EXEMPT ACCESS POLICY BY ACCESS ;
AUDIT EXEMPT IDENTITY POLICY BY ACCESS ;
AUDIT EXPORT FULL DATABASE BY ACCESS ;
AUDIT FLASHBACK ANY TABLE BY ACCESS ;
AUDIT FLASHBACK ARCHIVE ADMINISTER BY ACCESS ;
AUDIT FORCE ANY TRANSACTION BY ACCESS ;
AUDIT FORCE TRANSACTION BY ACCESS ;
AUDIT GLOBAL QUERY REWRITE BY ACCESS ;
AUDIT GRANT ANY OBJECT PRIVILEGE BY ACCESS ;
AUDIT GRANT ANY PRIVILEGE BY ACCESS ;
AUDIT GRANT ANY ROLE BY ACCESS ;
AUDIT GRANT DIRECTORY BY ACCESS ;
AUDIT GRANT EDITION BY ACCESS ;
AUDIT GRANT MINING MODEL BY ACCESS ;
AUDIT GRANT PROCEDURE BY ACCESS ;
AUDIT GRANT SEQUENCE BY ACCESS ;
AUDIT GRANT TABLE BY ACCESS ;
AUDIT GRANT TYPE BY ACCESS ;
AUDIT IMPORT FULL DATABASE BY ACCESS ;
AUDIT INDEX BY ACCESS ;
AUDIT INSERT ANY CUBE DIMENSION BY ACCESS ;
AUDIT INSERT ANY MEASURE FOLDER BY ACCESS ;
AUDIT INSERT ANY TABLE BY ACCESS ;
AUDIT LOCK ANY TABLE BY ACCESS ;
AUDIT MANAGE ANY FILE GROUP BY ACCESS ;
AUDIT MANAGE ANY QUEUE BY ACCESS ;
AUDIT MANAGE FILE GROUP BY ACCESS ;
AUDIT MANAGE SCHEDULER BY ACCESS ;
AUDIT MANAGE TABLESPACE BY ACCESS ;
AUDIT MATERIALIZED VIEW BY ACCESS ;
AUDIT MERGE ANY VIEW BY ACCESS ;
AUDIT MINING MODEL BY ACCESS ;
AUDIT NOT EXISTS BY ACCESS ;
AUDIT ON COMMIT REFRESH BY ACCESS ;
AUDIT PROCEDURE BY ACCESS ;
AUDIT PROFILE BY ACCESS ;
AUDIT PUBLIC DATABASE LINK BY ACCESS ;
AUDIT PUBLIC SYNONYM BY ACCESS ;
AUDIT QUERY REWRITE BY ACCESS ;
AUDIT READ ANY FILE GROUP BY ACCESS ;
AUDIT RESTRICTED SESSION BY ACCESS ;
AUDIT RESUMABLE BY ACCESS ;
AUDIT ROLE BY ACCESS ;
AUDIT ROLLBACK SEGMENT BY ACCESS ;
AUDIT SELECT ANY CUBE BY ACCESS ;
AUDIT SELECT ANY CUBE DIMENSION BY ACCESS ;
AUDIT SELECT ANY MINING MODEL BY ACCESS ;
AUDIT SELECT ANY SEQUENCE BY ACCESS ;
AUDIT SELECT ANY TABLE BY ACCESS ;
AUDIT SELECT ANY TRANSACTION BY ACCESS ;
AUDIT SEQUENCE BY ACCESS ;
AUDIT SYNONYM BY ACCESS ;
AUDIT SYSDBA BY ACCESS ;
AUDIT SYSOPER BY ACCESS ;
AUDIT SYSTEM AUDIT BY ACCESS ;
AUDIT SYSTEM GRANT BY ACCESS ;
AUDIT TABLESPACE BY ACCESS ;
AUDIT TRIGGER BY ACCESS ;
AUDIT TYPE BY ACCESS ;
AUDIT UNDER ANY TABLE BY ACCESS ;
AUDIT UNDER ANY TYPE BY ACCESS ;
AUDIT UNDER ANY VIEW BY ACCESS ;
AUDIT UNLIMITED TABLESPACE BY ACCESS ;
AUDIT UPDATE ANY CUBE BY ACCESS ;
AUDIT UPDATE ANY CUBE BUILD PROCESS BY ACCESS ;
AUDIT UPDATE ANY CUBE DIMENSION BY ACCESS ;
AUDIT UPDATE ANY TABLE BY ACCESS ;
AUDIT USER BY ACCESS ;
AUDIT VIEW BY ACCESS ;
============

I have tested on my DEVELOPMENT DB again. It is working fine. It requires to reconnect after turn off the DROP ANY TABLE. Have you done that? Send me output of test you performed.
You can test using following script.
connect as USER2 & execute following statements.
audit drop any table;
create table user1.test(
col1 number,
col2 number);
select os_username, username, action_name, priv_used
from dba_audit_trail a
where action = 85
and obj_name = 'TEST';
truncate table user1.test;
select os_username, username, action_name, priv_used
from dba_audit_trail a
where action = 85
and obj_name = 'TEST';
noaudit drop any table;
reconnect here as USER2
truncate table user1.test;
select os_username, username, action_name, priv_used
from dba_audit_trail a
where action = 85
and obj_name = 'TEST';

Tracking changes to a site

My company used Bugzilla in the past (I have never used it)
to have the client mark and track changes to a site in developemnt
via a testing server. They couldn't actually MAKE the changes
themself (like a CMS tool) but it allowed the developers to simply
keep track what changes they requested and if they should charge
more for additional changes. Does Dreamweaver have anything like
this?

Unless you had auditing enabled you won't find who changed it.
Here is a little guide to help you with auditing changes on SharePoint https://gallery.technet.microsoft.com/SharePoint-Auditing-Quick-a0de5d4a if you need more
details you might consider using 3rd party software like
Netwrix Auditor for SharePoint solution (20 days of free trial)
--- Jeff (Netwrix)

RPUAUD00 Change Log Issue on Table T585B

I added some new infotypes to the RPUAUD00 change log on tables:
t585a
t585b
t585c
Everything seems to be working as expected, but I received soft errors on t585b:
"! All data fields 0006 01 will be deleted"
when I used * (all fields).
This did not happen when I used actual field names.
Does anyone know what that means?
thanks!

It's just a warning for this specific view if you put '*' in field name. What it means is that if you currently configure audit changes
for specific fields of this infotype, all of these entries will automatically be deleted by SAP when you use '*' (all fields are marked for audit). Therefore, there should not be a concern on the message.

Auditing Changes to ERDs?

Similar Messages

Maybe you are looking for