Fine grained auditing on table, but I don't want it on view

I have a table which contains sensitive information, and I want to audit all queries on it except the web account 'EJBUSER', so I created the below policy:
begin
dbms_fga.add_policy( policy_name => 'STAFF_LOGON_QRY_POLICY'',
object_schema => 'CPY',
object_name => 'STAFF_LOGON',
statement_types => 'SELECT',
audit_condition => 'SYS_CONTEXT(''USERENV'',''SESSION_USER'') != ''EJBUSER'' ');
end;
This does exactly what I want, but I also have a view off this STAFF_LOGON table (below) which users can query to see their own details.
create or replace view CPY.V_STAFF_LOGON
as
select * from cpy.staff_logon
where user_name = user;
When a user queries this view, it also writes an entry to the dba_fga_audit_trail, but I only want to see queries against the base table, not the view.
Is it possible to fga audit the base table only, and not the view?
Edited by: stuartu on Feb 17, 2010 11:36 AM
Edited by: stuartu on Feb 17, 2010 12:01 PM

But does this delete the whole account from the cloud, or just from my device. I must make sure my husband doesn't loose all his business contacts which are in the iCloud device. Thanks.

Similar Messages

  • Should I use the fine-grained auditing?

    I need to record the changes (of data) made to serveral tables by users. For example, I have to check the before and after images of the changes and what kind of transactions they do to cause the changes. Sould I program the logging procedure in the application or should I use the fine-grained auditing function of oracle to do it. I am not sure what this built-in function can do for me. Can anyone give me some advice on this? Thks.
    A beginner

    Why Fine-Grained Auditing?
    You may want to check standard auditing if it is suitable for you
    http://download.oracle.com/docs/cd/B19306_01/network.102/b14266/cfgaudit.htm#BABCFIHB
    I don't think you can get pre and post update values of the affected data with Auditing.
    FGA is useful when you want to audit just a "subset" of the data in the table.
    (for instance, audit everyone that wants to get all records from EMP table where SALARY > 100000)
    Message was edited by:
    tekicora

  • Fine Grained Audit records to syslog

    Hello experts,
    I am working on Standard Auditing and Fine Grained Auditing on 11.2.0.3 databases on Red Hat x86_64.
    I am trying to send Fine Grained Audit records to syslog as for my Standard Audit records with audit_trail set to OS, but can't find any appropriate option.
    When I create FGA policies with the ADD_POLICY procedure of the DBMS_FGA package, the audit_trail parameter can only be set to DB or XML, as stated in [PL/SQL Packages and Types Reference|http://docs.oracle.com/cd/E11882_01/appdev.112/e25788/d_fga.htm#CDEIECAG].
    Does somebody know if it is possible to send FGA audit records to syslog directly:
    1. without using any additional product (e.g. Oracle Audit Vault)?
    2. without doing manual extraction from fga_log$ or DBA_COMMON_AUDIT_TRAIL?
    Thanks for any suggestion.

    Hi,
    Well, i did not used FGA yet.
    I used audit_Trail=db and the query SELECT username,extended_timestamp,owner,obj_name,action_name,sql_text FROM dba_audit_trail WHERE to_char(extended_timestamp, 'DD/MM/RR') = to_char(SYSDATE - 1, 'DD/MM/RR') ORDER BY timestamp)
    Then i wrote a procedure, and exported the results using utl_file .
    And i scheduled this procedure to run daily.
    It works pretty good, if you like the solution as ask for details.
    Hope that helps,
    Regards.

  • Fine-grained auditing

    Is there any way to audit more than one table using fine-grained auditing in oracle 10.2.0.
    Thnks in advance.

    sonidba wrote:
    Is there any way to audit more than one table using fine-grained auditing in oracle 10.2.0.
    Thnks in advance.Read this
    Re: use multiple tables in FGA Add_policy?

  • How to know if Fine Grain Auditing is used

    I have to migrate a exsisting database to a new plattaform.The old database is a Enterprise Edition and the new must be a Standard  Edition.
    But first I must make sure that none of the functions of the Enterpise edition is being used.
    How I can know if the database is using the Fine Grain Auditing?
    thanks

    Thank you. Furthermore you can find a lot of resource about it.
    Regards
    http://www.oracle.com/technetwork/database/security/index-083815.html

  • Is there a way to print from ipad 4 to a non AirPrint printer? I have a Canon Pixma MP 620 wifi which works fine with my PC but I don't want to buy a new printer. Is there an app for this or adaptors which could work?   thank, Ric

    Is there a way to print from ipad 4 to a non AirPrint printer?
    I have a Canon Pixma MP 620 wifi which works fine with my PC but I don't want to buy a new printer.
    Is there an app for this or adaptors which could work? 
    Thank, Ric

    Printopia is another option but be aware that since these solutions effectively act as a print server and AirPrint receiver, they require a computer to be running on the same WiFi network.
    Canon also has a couple of apps in the App Store that might facilitate this on non-AirPrint printers. Check out...
    Canon Easy-PhotoPrint
    Canon Mobile Printing
    PIXMA Printing Solutions

  • My iPod's screen says "Connect to iTunes" and when I connect it to iTunes it's telling me to restore, but I don't want to restore/lose everything on it. The "Connect to iTunes" message won't go away.

    When I plugged my iPod into my macbook, a window for an iPod Touch software update popped up, so I clicked update, then it said that my iPod was over capacity or something similar to that, so basically I didn't have enough room for the update, which I thought was fine. So then once I unplugged my iPod, I was unable to use it. The screen was telling me to connect to iTunes (how it does when you first purchase an iPod, and turn it on for the first time.) So, I then connected it to iTunes and it told me I had to restore my iPod, it gave me no option other than to click "restore" But I don't want to lose everything that's on my iPod...but now I can't use it because the screen is still telling me to connect to itunes. How do I get out of restoring it?

    If you have a graphic of iTunes and a cable displayed on your iDevice then it is in Recovery mode.
    Check this to try an "exit"
    http://osxdaily.com/2011/01/08/iphone-recovery-mode/

  • Can I use gpt to recreate/unerase a partition table? (Rebuild the GPT/GUID partition table?)  I don't want to do FILE recovery.

    (Yes, I've  googled a bunch and read threads like this one already.)
    Can I use gpt or some other app to recreate/unerase a partition table?  That is, how can I rebuild a disk's GPT/GUID partition table?)  I don't want to do FILE recovery.
    What happened: Instead of erasing a single partition off a disk with many partitions, the entire partition table was erased (using Disk Utility, w/o deleting the underlying files).  Somehow the "Erasing a disk deletes all data on all its partitions." warning message was missed.
    I have a copy of the output of df, with the number of blocks in each partition, from just prior to the erasure, so I should be able to recreate the GPT/GUID partition table.  Editing the GPT with a hex editor is not feasible.  Simply recreating the partitions with Disk Utility will overwrite the key filesystem tables on each partition, and I don't want to do that, plus Disk Utility doesn't allow me to specify exact partition sizes anyway.
    Surely there's an app for rebuilding the partition table (other than emacs' hexl-mode!) for recreating/unerasing a partition table when the partition sizes and orders are known?  I've looked at the advertising for a bunch of recovery software and none of them clearly indicate that they will do what I want. 
    I guess I can try using gpt on a copy of the reformatted drive I've made with dd, and see what happens.  But perhaps someone knows of a tool that should do what I need, or knows if gpt is that tool or not.
    There are answers and tools that will do FILE recovery - search for files and recover the ones that aren't fragmented or deleted.  As far as I can find, they just look for files on the disk, and don't pay much, if any attention to the filesystem info or directory heirarchy, which in this case is valuable.  Of course I could send it in to DriveSavers, or the like.  But none of that seems necessary, and the scavenging file recovery apps won't do the job well,
    E.g. some are mentioned here:
    I don't want to do FILE recovery.
    Thanks for any help.
    The links in this post are to pages describing the underlined term, e.g. the man pages for df and gpt.
    dd output includes:
    Filesystem
    512-blocks 
    Used Available Capacity  Mounted on

    Aperture has the ability to work with files in their existing location. They are called "referenced masters." When you import images, you should select the "In their current location" in the "Store Files:" drop down box. Have a read of the documentation for full specifics. Unsure how you can resolve your duplication; might be some work but next time have a read of the manual first
    Information for versions is stored in the Aperture database (library file). The masters can be inside the library file itself, or they can be somewhere else.

  • Is there a way to have internet access for my laptop through Verizon?  I have a smartphone, but I don't want to rack up too much data.

    Is there a way to have internet access for my laptop through Verizon?  I have a smartphone, but I don't want to rack up too much data.  How would the laptop connect to the  4G? network?  Thanks for any info:)

    Rcshnoor nailed it, everything will depend on how they manage their data connection once the laptop is connected.  It is perfectly feasible that they will have no issues with this new connection.  However, there is nothing stopping the user from going above and beyond the data usage cap currently sufficient for the phone by itself.  We cannot presume that any estimations on new usage will be accurate either.
    Users should always be aware of the reality that revolves around data usage and the devices that consume them.  Its no different than installing a 2nd waterline/hose on your house.  Sure the hose will be fine if you remember to turn it off when you are done, but no one is going to stop you from letting it run all night if you forget.

  • I have an iPhone and an iPod with the same iCloud/Apple ID but I don't want have the same stuff on them?

    Ok so I have an iPhone and an iPod which share the same iCloud/appleID. I did this today when I got my new iPhone I put in my iCloud details which put everything I had on my iPod onto my iPhone(I was unaware this happened). I'm happy with all the apps added straight on and my contacts added but I don't want to have all my photos from my iPod on my iPhone. I want to keep the photos from my iPod on my iPod and when I take pictures on my iPhone they stay just on my iPhone. I'm wondering if this is possible as it's with the iCloud? I have previous synced my iPod on my laptop when adding music ect but I don't know if that effects iCloud I don't really know but I'm worried if I delete all the pictures off of my iPhone then sync that then sync my iPod into the same laptop will it wipe those pictures since there off my iPhone? I don't really get how all this works so help is very much appreciated!!  And I hope what I've wrote makes sense to someone!

    Welcome to the Apple Community lizzie.
    If you don't want photo stream to sync your photos between devices go settings > iCloud and uncheck photos, do this on each device.

  • I was on a free dictionary website and it asked me if it would like to send me push notifications and i allowed it but i don't want them anymore...how do i get rid of that? I'm using my macbook pro by the way

    I was on a free dictionary website and it asked me if it would like to send me push notifications and i allowed it but i don't want them anymore...how do i get rid of that? I'm using my macbook pro by the way

    Go to the site and look for an unsubscribe link. Or, contact the site and ask them to stop.

  • I changed my email for my Apple ID, and my iCloud won't let me change it, it only lets me delete my account. But I don't want everything on my phone that is linked to it to be deleted too. How do I change the email in the iCloud settings

    I changed my email for my Apple ID, but on my iCloud it's still registered under my old email, but I can't change it. The only option it has for me to do is to delete that account from my phone but I don't want to lose anything I have on my phone that is linked to my iCloud account

    If you go to your iTunes account on the computer, where you changed your email account info, you find a link to other changes for your account info.  You may have done all that already, if so next you have to change the info on the device.
    To change the device info:
    Step 1.  Connect to iTunes on the computer and on the "Info" page, check the sync info box.  You should notice a change in your email info on the screen .  Sync device to the computer.
    Step 2.  note at the bottom of this "Info" screen a note that says to change you iPad info:  Go to Settings on the iPad, then Mail, Contacts, Calendars.   Change your email account information here.

  • I want to use one apple id in my macbook and iPad but i don't want pics to get sync and show in both devices, how should i stop this ?

    I want to use one apple id in my macbook and iPad but i don't want pics to get sync and show in both devices, how should i stop this ?

    Turn off My PhotoStream in iCloud on both the iPad and the Mac. PhotoStream is what shares your photos (unless you are using iCloud Photo Library Beta, in which case, all photos uploaded are accessible from all devices signed onto the same Apple/iCloud ID).
    Cheers,
    GB

  • My husband and I share one computer.  We want to be able to share the same music on our iPhones, but we don't want to share the same contacts and applications.  How can I set this up so we still share music, but everything else is separate on our iPhones?

    My husband and I share one computer.  We want to be able to share the same music on our iPhones, but we don't want to share the same contacts and applications.  How can I set this up so we still share music, but everything else is separate on our iPhones?

    Welcome to the Apple Community.
    iTunes and iCloud are different accounts. You can both use the same ID for the store login and share your music etc., and use different ID's to log in to iCloud, thereby keeping your calendars etc separate.

  • Is there a way to change the master text length in FCP? The default length is 10 seconds, which is too long. I can easily adjust the length but I don't want to do it each time, and I don't want to adjust one and then have to copy and paste this length.

    Is there a way to change the master text length in FCP? The default length is 10 seconds, which is too long. I can easily adjust the length but I don't want to do it each time, and I don't want to adjust a text clip and then have to copy and paste this each time. Ideally, there should be something in User Preferences but there is not. Thanks.

    Maybe some one else can pipe up with a solution, but this would literally take 2 seconds to do for a new project.  And you can create a "template project" that includes this "text" clip.  Save this project and then to a get info and check "stationary pad."  When you double click on this file, fcp will open with a copy of this project and you just need to do a save as. 
    I've been working with computer editing systems for longer than i can remember and at a certain point you just have to adapt your workflow to the limitations of the software.  

Maybe you are looking for

  • Updating List View Web Part property in page

    I have a List View web part (In the page > Add web part > App > document library name). I need to update the TitleUrl property of this web part through C# code. The SaveChanges() method below works for my visual web parts, but not for the List view w

  • [SOLVED] Error compiling systray patch for dwm 6.0

    Hello folks. This is makepkg's output. ┌─[parazyd][archbox][~/dwm] └──╼ makepkg -ef ==> Making package: dwm 6.0-1 (Wed Nov 19 17:33:05 CET 2014) ==> Checking runtime dependencies... ==> Checking buildtime dependencies... ==> WARNING: Using existing s

  • Display won't wake up

    It's a brand new notebook.I've done nothing on it, other than installing Windows updates and creating recovery disks.I set the "Turn off display after" option to 1Minute.IMPORTANT: I set display brightness all the way to zero, the lowest setting poss

  • I ordered my iPhone on Friday and it is still on Processing Items?

    So i ordered my Iphone on Friday and it still says "Processing Items" and "Delivers Oct 14 via" i got a verizon 16 GB White iPhone! And i havent gotten any email by apple besides the one confirming my order! And its already Wednesday night Do you thi

  • Powerbook sleeping in the job

    Hi, is there a way of haveing your powerbook G4 not go to sleep when you close the lid? I have been looking at all the settings but there does not seem to be a setting for this. Thanks David