How to query and revoke Statements Auditing (11g and higher)

HI,
When I choose the OS/XML Standard Auditing:
1) Which views allow me to see what statement auditing have been created?
For instance: audit all on scott.emp by access.
2) How to revoke a statement auditing like: audit all on scott by access?
Thanks and Regards.

I don't understand... have you tried it?
07:14:57 SQL> select * from user_obj_audit_opts;
no rows selected
Elapsed: 00:00:00.03
07:14:58 SQL> audit all on junk by access;
Audit succeeded.
Elapsed: 00:00:00.03
07:15:12 SQL> select * from user_obj_audit_opts;
OBJECT_NAME                    OBJECT_TYPE             ALT       AUD       COM       DEL       GRA       IND       INS       LOC       REN       SEL       UPD       REF EXE       CRE       REA
WRI       FBK
JUNK                           TABLE                   A/A       A/A       A/A       A/A       A/A       A/A       A/A       A/A       A/A       A/A       A/A       -/- -/-       -/-       -/-
-/-       A/A
1 row selected.
Elapsed: 00:00:00.12
07:16:46 SQL> noaudit all on junk;
Noaudit succeeded.
Elapsed: 00:00:00.03
07:16:56 SQL> select * from user_obj_audit_opts;
no rows selected
Elapsed: 00:00:00.02
07:17:03 SQL>
'ALL' is a shortcut for naming all of the relevant options: ALTER, SELECT, DELETE, etc.

Similar Messages

  • How to query Cell level Security in 11g AW

    Are there any views/tables that we might be able to use to query the Security settings in 11g AW?
    In AWM 11g we have the ability to grant users/groups security at a cell level, with this functionality there is no need for us to maintain the PERMIT_WRITE program to manage Write access to users. I could not find any document that states how we can manage/view the security outside the AWM tool.

    For Oracle 11.1, there is a dba-level view called
    DBA_XDS_INSTANCE_SETS which provides the data security definitions
    for both rdbms table-based and olap dimension/cube-based data security
    documents. The actual definition of data security is stored in the XML DB
    repository under the XDB schema.
    SQL> desc dba_xds_instance_sets
    Name Type
    SCHEMA_NAME VARCHAR2(30)
    OBJECT_NAME VARCHAR2(30)
    INSTANCE_SET VARCHAR2(30)
    DESCRIPTION VARCHAR2(4000)
    STATIC VARCHAR2(5)
    EVAL_RULE VARCHAR2(4000)
    ACLIDS SYS.XMLTYPE
    There is no way to actually manage the data security documents outside of
    AWM for 11.1 in terms of creating/editting/deleting the data security documents
    at least none that is documented.
    Here is an example of what the DBA_XDS_INSTANCE_SETS view returns:
    SQL> select * from dba_xds_instance_sets;
    SCHEMA_NAME OBJECT_NAME INSTANCE_SET
    DESCRIPTION
    STATI
    EVAL_RULE
    ACLIDS
    GLOBAL TIME DEFAULT_POLICY
    false
    1 = 1
    <aclids xmlns="http://xmlns.oracle.com/xs">
    <aclid>4C96964E68CC309FE040578C550414E2</aclid>
    </aclids>
    GLOBAL TIME policy1
    false
    GLOBAL."TIME".DIM_KEY IN ('186', '176', '133', '134', '135', '177', '136', '137', '138')
    <aclids xmlns="http://xmlns.oracle.com/xs">
    <aclid>4C96964E68CF309FE040578C550414E2</aclid>
    </aclids>
    Have you created data security in AWM on dimensions/cubes in 11.1?
    Any feedback about your experiences with AWM around data security would
    be welcome.

  • How to store pl/sql statement in varchar and call EXEC on it?

    So this statement works:
    SELECT column_name BULK COLLECT INTO table_column_list FROM all_tab_columns WHERE table_name = conv_tablename AND OWNER IN (SELECT USER FROM DUAL);
    However I want to add conditions like " AND column_name <> 'abc' " at the end. So i tried to store this in a varchar and call EXEC on it:
    select_column_value_sql_stmt := 'SELECT column_name BULK COLLECT INTO table_column_list FROM user_tab_columns WHERE table_name = '''|| conv_tablename || '''' || inexclude_column;
              EXECUTE IMMEDIATE select_column_value_sql_stmt;     
    No matter how I concatenate the conv_tablename part, i get an error. either invalid identifier or unimplemented feature.
    so is there a way to do this at all?
    Thanks in advance.

    Welcome to the forum!
    Wheneve you post provide your 4 digit Oracle version (result of SELECT * FROM V$VERSION).
    >
    So this statement works:
    SELECT column_name BULK COLLECT INTO table_column_list FROM all_tab_columns WHERE table_name = conv_tablename AND OWNER IN (SELECT USER FROM DUAL);
    However I want to add conditions like " AND column_name 'abc' " at the end. So i tried to store this in a varchar and call EXEC on it:
    select_column_value_sql_stmt := 'SELECT column_name BULK COLLECT INTO table_column_list FROM user_tab_columns WHERE table_name = '''|| conv_tablename || '''' || inexclude_column;
    EXECUTE IMMEDIATE select_column_value_sql_stmt;
    No matter how I concatenate the conv_tablename part, i get an error. either invalid identifier or unimplemented feature.
    so is there a way to do this at all?
    >
    Yes - you can do it but the syntax is different for BULK COLLECT when using EXECUTE IMMEDIATE; the INTO goes AFTER the query, not within it.
    See the example code at this link
    http://unix-oracle-11g.blogspot.com/2011/03/dynamic-sql-execute-immediate-bulk.html
      -- example of dynamic sql with bull collect
      v_sql_stmt := 'SELECT sal FROM emp_t';
      EXECUTE IMMEDIATE v_sql_stmt BULK COLLECT INTO vc_sal;So you won't be able to use a common set of queries for normal vs execute immediate.

  • How does cyrus flag the state of  mail and can we preserve this ?

    When I restore an e-mail account the user gets his mail as unread
    What i am saying here is
    We use imap accounts and I had to restore the mail from a backup, all the users got there mail back, but all as unread including the folders they created.
    it would be handy to know

    There is no reliable way of preserving the read/unread states when restoring.

  • How to speed a select statement with the NOT EXISTS where condition ?

    Hi all,
    I created a view : create or replace view view_name as select * from table_1,table_2 where join_condition and some conditions.
    Now I have added in the view "where" clause two NOT EXISTS conditions based on one another different table respectively.
    Before I added these two conditions the response time was fast ; but after I added these two conditions then the response time deteriorated.
    So how to optimize the select statement ? Hints and so on ...
    Thank you very much indeed
    Message was edited by:
    andrianiaina

    Just run the script :
    SQL> explain plan for select * from dual;
    Explained.
    SQL> @$ORACLE_HOME/rdbms/admin/utlxpls.sql
    PLAN_TABLE_OUTPUT
    | Id  | Operation            |  Name       | Rows  | Bytes | Cost  |
    |   0 | SELECT STATEMENT     |             |       |       |       |
    |   1 |  TABLE ACCESS FULL   | DUAL        |       |       |       |
    Note: rule based optimization
    9 rows selected.
    SQL>Nicolas.

  • How GUID helps to link the backend documents and SRM docuements and updates

    Hello All
    there is no SRM business Objects without GUIDS.
    how really it updates the backend docuemnts and bringing the related docuemnts with use of GUID.
    Can any one expalin in details clena job and get status does this job?
    How this GUID concepts developed (Global Unique id).
    What a fantastic concept of GUID !!!!
    How backend understands SRM  GUIDs and where these GUIDs are stored in backend system.
    Muthu

    Thanks Jash,
    you mean the objecttype_hi could only be '05' or '06'?
    And I am reading some exsiting codes, there is a fragment:
    <b>SELECT DISTINCT
             e~guid
             e~object_id
             e~description
             c~stat
             d~priority
             e~created_at
             e~changed_at
             a~partner_no
             a~partner_fct
        FROM   ( ( ( crmd_partner       AS a
          INNER JOIN crmd_link          AS b
            ON aguid     = bguid_set )
          INNER JOIN crm_jest           AS c
            ON bguid_hi  = cobjnr    )
          INNER JOIN crmd_activity_h    AS d
            ON bguid_hi  = dguid     )
          INNER JOIN crmd_orderadm_h    AS e
            ON bguid_hi  = eguid
        INTO CORRESPONDING FIELDS OF TABLE lt_seltab
        WHERE   b~objtype_hi  = '05'
          AND   b~objtype_set = '07'
          AND   c~stat     LIKE 'E%'
          AND   e~process_type = gc_process_type-sr_serv_order
          AND   c~inact       = ''
          AND ( a~partner_fct = ls_bpfct-partner_fct
          OR    a~partner_fct = ls_c_bpfct-partner_fct )
        .</b>
    I wonder how could CRMD_ORDERADM_Hguid CRMD_ACTIVITY_Hguid and CRM_JEST~objnr are identical.
    Does it mean that the three tables describe the same object's different faces?
    Thanks very much and Best Regards,
    Marco

  • ITunes: How can I sync my podcasts between Macs and iDevices?

    Hi,
    Using iTunes for a decade now, I still having the same problem that I don't know how to solve:
    How can I sync my podcasts subscriptions and play states between Macs and iDevices?
    I am having two MPBs and one iMac, as well as an iPhone and iPad (yes, making someone rich in California), all of them are linked to the same iTunes/Apple account, they are not in the same Wifi.
    What I would like to have that all these iTunes (plural) have the same Podcasts with the same played/unplayed states...
    Is there any way to do that now, possible with iCloud? I am completely confused now that they have introduced podcast.app for iDevices...
    Thank you for any idea for good solution!

    From what I can tell, the Podcast app should do for your iOS devices what you're describing--as long as they all use the same Apple ID. Here's an article with some helpful information about the app:
    http://support.apple.com/kb/HT5295
    To keep your subscriptions in sync across all devices, the article says this:
    "To subscribe to a podcast on your device, tap the Subscribe button from the podcast provider's page from the Podcast catalog. Enable subscription syncing to keep your subscription up-to-date across your iOS devices. On your iOS device tap Settings > Podcasts > Sync Subscriptions > ON.
    To sync playback position, the article says this:
    "Playback Sync automatically allows you to sync your playback position to all of your iOS devices with the Podcasts app installed, using your Apple ID. In order for Playback Sync to sync your playback position, you must be signed in to the iTunes Store using the same Apple ID on your iOS devices."
    As for keeping playback position on your iOS devices in sync with iTunes on your Macs, you'll need iTunes 11 on all your Macs. So if you're still using iTunes 10 or earlier, you'll need to run a software update to get the latest version. Incidentally, I came across this discussion, which offers some helpful setup/troubleshooting tips about using this new podcast playback syncing feature:
    https://discussions.apple.com/thread/4555757
    Hope this is helpful!

  • "Oracle BPM  Suite 11g" and "Oracle SOA Suite 11g" components

    Dear Friends,
    I am very confusing about the "Oracle BPM suite 11g" and "Oracle SOA Suite 11g" and would like your help on explanation as the following :
    I have learn that In order to use "Oracle BPM Suite 11g" require to have "Oracle SOA Suite 11g" components to install first. Does it means that :
    1) When we buy "Oracle BPM Suite 11g" , we automatically get the "Oracle SOA Suite 11g" components as well ?
    2) IS it correct that these " these Oracle SOA Suite 11g components" are included :
    (a) Oracle BAM
    (b) Oracle Business Rules
    (c) Oracle BPEL Manager
    (d) Oracle Service Bus
    (e) Oracle Complex Event Processing
    3) Do we have a right to use all of these components listed in (2) ?
    4) Then the answers in (3) is "YES", then Is it correct when the customer buy the "Oracle BPM Suite 11g" , they no need to buy "Oracle SOA 11g" any more when they would like to implements that applications based on SOA in the future (without using BPM) ?
    5) What IF , the customer would like to start with "Oracle SOA Suite 11g" product and decide to buy only Oracle SOA Suite 11g first ; then later on in the future they would like to implement BPM projects in the future. Can you upgrade "Oracle SOA Suite 11g" to include "Oracle BPM Sutie 11g" and pay only the price different ?
    I hope you can help providing the answers to these questions. THank you very much in advance.
    Best Regards
    Pearapon S.

    This is a question best answered by your Oracle reseller or Oracle account manager to give you all the details but I hope this brief answer helps:
    - The Unified Business Process Management Suite (BPM Suite 11g) includes: BPM Studio, BPM Composer, BPMN Service Engine and Workflow Extensions, BPM Process Spaces, and BPM Process Analytics.
    - BPM Suite 11g requires the licensing of SOA Suite 11g for Oracle Middleware which requires a license for WebLogic Suite.
    - You can license SOA Suite 11g now and license BPM Suite 11g later.
    Since the products are layered, I don't see this cutting into SOA sales at all. My personal view is that BPM on top of SOA is brilliant since it provides easy integration between human and automated tasks, builds on many of the SOA concepts that are key for a successful BPM implementation (functional, not the Oracle product), and uses the same IDE. The synergies extend past easy use of services; the same business rules and human workflow components are used between both products.

  • Oracle Database Vault vs Audit Vault and database firewall

    Hi All,
    I would like to know the main difference between Oracle Database Vault and Oracle Audit Vault and Database firewall.
    I have read all the white papers and documents on them both and find them very similar in work process.
    Only difference I see in the pricing.
    I feel Oracle audit Vault can do all the work of Database Vault with added feature of proactive session monitoring.
    If someone can help me based on their knowledge and experience it would be appreciated.
    Thank you.

    I have read the white papers of both Database Vault and Audit Vault
    According to database Vault sessions can be managed using various roles created as per business requirements.
    Audit vault offers same thing in terms of a firewall which manages and restrictions based on roles created .
    From the white papers:
    DATABAES VAULT:
    Oracle Database Vault restricts access to specific areas in an Oracle database from any user, including users who have administrative access.
    This enables you to apply fine_grained access control to your sensitive data in a variety of ways.
    Oracle Database Vault enables you to create the following components to manage security for your database:
    Realms
    Command Rules
    Factors
    Rule Sets.
    DATABAE AUDIT AND FIREWALL:
    Oracle Audit Vault and database Firewall consolidates database activity monitoring events and audit logs. Policies enforce expected application behaviour, helping preventing SQL injection, application bypass, and other malicious activities from reaching the database while also monitoring and auditing privileged users and other activities inside the database.
    To me these sound very similar of doing same work.
    My apologies as I am unable to paste the whole text here and I cannot type full documents here 

  • Audition CC and out of application memory issue (Mac osX 10.9.4)

    Hi All,
    I'm trying to do an "Automatic Speech Alignment" between two AC3 5.1 files (~170Mb and ~ 80Mb, ~59' each), and at 35% I'm running always out of application memory (and I cannot continue, even closing all applications and maintaining only Audition up and running).
    My Macbook Pro Mid 2012 has 4+4 Gb RAM and a SSD disk.
    I would like to know if I can use the disk with a sort of Disk Cache to help the process.
    Any piece of advice will be appreciated.
    Thank you very much
    Andrea

    you are right, Bob,
    in facts I’m trying with a simple rendered Stretch, no issues at all with
    memory, we’ll see the results
    Probably the ASA is a feature for some very specific and “small” topics
    Andrea

  • How to create the relationship between ESSBASE 11 and DM  in OBIEE 11G?

    Hi Experts,
    I have one requirement that there is one property table named 'Store Master' in DW,and it contains a lot of attribute, such as Open Date, Close Date, IS 24 Hour etc.
    But another data source is essbase and based on this source, I create all reports.
    In ESSBASE, it has one dimension and hierarchy Location, and it has four level, Country(L1),Region (L2),Province(L3),Store(L4)
    So I want to know how to create the relationship between Location (ESSBASE) and Store Master (DM).
    I try to create one relationship in physical layer between Gen4,Location and Store, then drag the open date and close date into Location Dimension in BMM,then Presentation Layer.
    When I drag column 'Open Date' ,'Gen4,Location ' and 'Sales' into reports, it will generate the following error message:
    State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. [nQSError: 43113] Message returned from OBIS. [nQSError: 43119] Query Failed: [nQSError: 14020] None of the fact tables are compatible with the query request Dim Region.Store Open Date. (HY000)
    However, when I remove the column 'Open Date'. it will be ok
    So what I missing the steps? Please help me. Thanks.

    >
    '2. Now, pull the 'Store' column from relational DB onto the Gen5, Location column from Essbase. This action now creates, two logical sources for your 'Store' column.'
    If the length from different data source is not same,such as 1001(DM),L_1001(ESSBASE), can I drag the 'Store' column from relational DB onto the Gen5, Location column from Essbase?
    I think it does not work.Right?Hi,
    I am not sure if you are talking about the length(as in varchar(128)) of the member value being different in different sources, or the member itself is different in both the sources.
    I am still assuming, that you are referring to the members not same in both the sources.If it is, the whole concept of federation is based on conforming dimensions. So, it needs that the same dimension information is present in both the sources and then only, you know we can analyze the numbers based on this dimension. So, either the dimension being different in both sources, or the members not present in both the dimensions might lead to incorrect numbers.
    So I select Store Attributes in relation DB and Location in ESSBASE in physical layer, then create the physical join, such as right("Hour Sales"."H_Sales".""."H_Sales"."Gen6,Location",4) = "Authorization".""."EDW"."T_EDW_MDM_STORE"."US_CODE", then drag the OPEN_DATE and CLOSE_DATE in relation DB to Location in ESSBASE in BMM,finially drag them into presentation layer.We create physical layer relationships, to send over the same relation to the underlying database during querying. So, creating a physical relationship between essbase cube and relation database would not help here.
    When you set up this federation, BI Server sends individual queries to each source and maps the conforming dimension members internally.
    Hope I was clear, and this helps.
    Thank you,
    Dhar

  • How to view the SQL statement generated during execution of the BW Query?

    Dear Experts,
    I am trying to retrieve data in a SAP BW Query from a Non-SAP system.
    I think if I am able to see the complete SQL statement that was generated when I executed the BW Query, I may be able to use it to retrieve the data.
    Do you know how and where I can see the SQL statement of a BW Query's SQL statement?
    I tried RSRT options to execute the Query but still could not find the SQL statement.
    Thanks in advance.
    Regards,
    Shunhui.

    hi
    goto rsrt
    give your query name
    select execute + debug option
    in the debug option under data manager check the check box "display SQL/BIA query
    selcet continue
    you can see the sql statement
    thanq

  • How to make a physical standby database in the read_only state in 11g?

    In 10g, we can make a physical standby database in the read_only state. But in 11g, no a read_only state for a physical standby database. How to make a physical standby database in the read_only state in 11g?

    Hi
    read-only mode (for 11g physical standby)
    A mode in which a database can be opened that allows queries, but disallows modifications.
    A physical standby database can be opened read-only so that queries may be performed. If a license for the Oracle Active Data Guard option has been purchased, a physical satndby database can be open while redo apply is active. This capability is known as Real-time Query.
    For more details have a look at:
    http://download.oracle.com/docs/cd/B28359_01/server.111/b28294/manage_ps.htm#SBYDB00706
    Hipe this Helps
    Regards

  • Statement AUDIT SELECT TABLE also audits update, delete and inserts

    Hi,
    Database Oracle 11g.
    After turning on AUDIT with these 2 statements:
    SQL> ALTER SYSTEM SET audit_trail = "DB_EXTENDED" SCOPE=SPFILE;
    SQL> AUDIT SELECT TABLE BY ACCESS;
    then insert, update and delete statements are recorded in sys.aud$ as well as select statements.
    My expectation was to see only select statements in sys.aud$.
    Please clarify :-)
    Best regards
    Erik

    it should not record other action apart from select,can you crosscheck audit configuration by
    select * from DBA_OBJ_AUDIT_OPTS;
    SELECT * FROM ALL_DEF_AUDIT_OPTS;

  • How to Query the Audit Tables

    Our Production system is suffering performance issues which we attribute to the large volume of records in the audit tables. We want to implement an archival solution to alleviate this, which would involve transferring older audit records to a separate database. To achieve this, we need to write SQL queries against the <app>DATAAUDIT and <app>TASKAUDIT tables in the HFM database. We are aware that we need to join other tables to see descriptions, e.g. <app>SCENARIODESC. We have also deduced the translation of Activity Codes from "HFMAuditExtractSchemaDefs.xml", which accompanies the HFM Audit Extract Utility.
    Unfortunately, there are some things which we do not know how to translate:
    1) Period (lPeriod) on the <app>DATAAUDIT table, e.g. 67108869 but need to show "Jun" etc.
    2) User (ActivityUserId) on the <app>TASKAUDIT table, e.g. -329543984
    3) Module (strModuleName) on the <app>TASKAUDIT table, e.g. #@RID@#19
    Can anyone advise how we should translate these pieces of data in order to give similar results to those seen on the Data Audit and Task Audit screens in Workspace?

    1.) Period - I'm not sure where this is coming from, but I'm pretty confident it is not sitting in the database which I find odd. I want to find this as well, but haven't had any free time to search around, sorry.
    2.) User - This one I can help you with.
    --Get Task Item Data by Hour for a given day by user
    select datepart(HOUR, cast(endtime-2 as smalldatetime)), count(activitycode) from <APP_NAME>_task_audit where activitycode in (1,4,6,8,9,12,14,15,16,21,23,44) and cast(endtime-2 as smalldatetime) between '2011-12-7 00:00:00' and '2011-12-7 23:59:59' and ActivityUserID in (select lUserID from HSV_ACTIVITY_USERS where sUserName = '<USER_NAME>') group by datepart(HOUR, cast(endtime-2 as smalldatetime))In the sample SQL Query above, I am looking for all of the task audit activity (for the specified tasks) for a specific user by hour. The part of the query you want to focus on is
    and ActivityUserID in (select lUserID from HSV_ACTIVITY_USERS where sUserName = '<USER_NAME>')The ActivityUserID in the task audit table will match up to the lUserID field in the HSV_ACTIVITY_USERS table. sUserName will be the actual text username. Depending on how you are configured, the name may look like johndoe or johndoe@Native Directory or johndoe@AD, etc. If you query that table, you'll figure it out pretty quickly.
    3.) Module ID. I can only partially assist on this one.
    This is not also in the HFM database. I suspected it might be floating in workspace; however, can't really find it there either.
    I can tell you a couple things though....
    #@RID@# Is just a placeholder for Resource ID. The important part is the number behind it. If you do a search on your folders for @RID@, you'll get one hit where it is defined as a constant, but that is it. (I was hoping a file search would reveal a table of the ID's; however, I wasn't that lucky). There is probably a table of values that correspone somewhere, but I haven't found it.
    If you do a distinct select, you'll see there's not too many ...
    select distinct strmodulename from <APP_NAME>_task_audit#@RID@#10
    #@RID@#13
    #@RID@#14
    #@RID@#16
    #@RID@#18
    #@RID@#23
    #@RID@#30
    #@RID@#32
    #@RID@#4294967295
    #@RID@#45
    #@RID@#46
    #@RID@#49
    #@RID@#52
    #@RID@#58
    #@RID@#59
    #@RID@#65
    #@RID@#66
    #@RID@#67
    #@RID@#68
    #@RID@#69
    #@RID@#7
    #@RID@#9
    HyperionReports
    How can you determine these values?
    The quick and dirty way would be to run a Task Audit Extract for a given date range as this will reveal the Module Name.
    Then execute a SQL Query on the Task Audit Table for the same data range. You could then match up the records and deduce the values.
    --Get Task Items by Date Range
    select (select sUserName from HSV_ACTIVITY_USERS where lUserID = ActivityUserID) as UserName, ActivityCode, ServerName, AppName, cast(StartTime-2 as smalldatetime), cast(EndTime-2 as smalldatetime), strDescription, strModuleName from <APP_NAME>_task_audit where cast(endtime-2 as smalldatetime) between '2011-12-7 00:00:00' and '2011-12-7 23:59:59' order by endtime ascOnce you determine the values, I would create a table in your database to hold them so that you could use them in future queries. I would also recommend you do the same with the activitycodes.

Maybe you are looking for