Auditing non shema owner actions...

Question

Greetings,
I have a main schema containing application data. Users access that schema thru front end application only. But some database users can connect without front end application (using sqlplus etc)
SETUP:
Main schema: HRAPPS
other schema : OPERATIONS,DATAOPER
REQUIREMENT: user OPERATIONS,DATAOPER can connect & perform DML operations on HRAPPS schema tables. I would like to audit ONLY OPERATIONS&DATAOPER actions on HRAPPS. (NO audit if hrapps accessed by shema owner....ie HRAPPS)
What I did:
BEGIN
DBMS_FGA.add_policy(
object_schema => 'HRAPPS',
object_name => 'TEMP',
policy_name => 'temp_test_AUDIT',
audit_condition => NULL, -- Equivalent to TRUE
audit_column => 'SALARY',
statement_types => 'INSERT,UPDATE,DELETE');
END;
But this audits actions of HRAPPS aswell ! I would like to audit ONLY actions performed by other users on HRAPPS schema, not HRAPPS itself.
Hope I clearly expressed my doubt. I am using 11gR2.
Pleas suggest.
thanks a lot
regards

Answer 1

You don't need FGA for that.
If you have Auditing enabled (with audit_trail=DB), you should be able to
AUDIT ALL BY OPERATIONS;
-- or, alternatively, AUDIT INSERT, UPDATE, DELETE BY OPERATIONS;
-- or, for selective audit AUDIT INSERT, UPDATE, DELETE ON HR.TEMP BY OPERATIONS
AUDIT ALL BY DATAOPER;
-- or, alternatively, AUDIT INSERT, UPDATE, DELETE BY DATAOPER;Hemant K Chitale