Stop auditing select statements issued against SYS objects

Hi,
My current client has a requirement to track destructive updates (i.e. insert, update, delete) issued by users who can connect directly to the database. At the moment though, SELECT statements issued against SYS-owned objects are also being captured to the Oracle audit trail. For the time being at least these need to be disabled.
I've issued NOAUDIT SELECT TABLE/SEQUENCE and NOAUDIT SELECT ANY TABLE/SEQUENCE commands, as has a user with the SYSDBA privilege, and they're still being logged. Is there any way to switch these off? I don't know if it's significant (I'm not a DBA by trade) but the audit_sys_operations parameter is set to True.
My client is currently running Oracle Database 10.2.0.5.0 standard edition.
If anyone has any suggestions I'd be grateful.
Thanks in advance,
Steve

Hi,
Thanks for the input so far ...
@Eduardo and KarK ...
show parameter audit
audit_file_dest string D:\ORACLE\PRODUCT\10.2.0\ADMIN\USSUPM2\ADUMP
audit_sys_operations boolean TRUE
audit_trail string DB, EXTENDED
If we set audit_sys_operations to FALSE, won't that stop auditing of all actions carried out by, for example, someone who connects as SYSDBA? That is something that's still needed to be captured. Unfortunately they go to the WIndows Event Log but at least they're captured somewhere.
@Hemant
This auditing was in place before my client took me on, so I can't say what was used to initiate it unfortunately. What I can say though is that they absolutely don't want to turn off auditing by SYS- type users, just SELECT against SYS-owned objects.
Thinking simplistically, could I just write a script which trawls dba_objects for sys-owned tables, views and sequences and explicitly issues a noaudit select against what's found, and get one of the sysdba-type people we have access to to run it?
Thanks in advance (again)
Steve

Similar Messages

Finding Delete statement issued in particular object

Dear All,
Please let me know how to find what are all the delete statement issued against a object in oracle. some one is deleted some data from one table i want to find when the delete statement fired in my schema.
With Regards
Ramesh

you have audit turn on right? there should be a report for DML in audit vault.

Is there any way to audit select statements

Hi
I need to audit select statements. My specific need is to know the results of every select executed on one table.
Example.
When a user executes select * from person where personid=5;
I need to be able to know who executed the query and the results obtained.
By activating audit options i can know the user, but i dont know how to store the consulted records.

hi,
wanting to audit the results of select statements is ill-advised, apart from the fact it's virtually not possible to implement
(consider for example the use of bind variables) it has the following problems: it would cause a tremendous amount
of audit data, in the support practice we already advise customers to reconsider to even normally audit select table
for all users, since even recording the select statements itself is already a big volume in a typical deployment. Then
there's the performance impact as every statement wouild need to execute twice, once for the application / end
user and another time recursively to store the audit data. Short answer: don't do it.
greetings,
Harm ten Napel

Selected state issue with Menu Module V2

OK so I am getting an issue with Menu Module V2. I have used this before with success but this time I have hit a wall. I possed this question to BC live chat and they bugged out real quick.
The site in construction is http://www.urbanista.com.au
What is happening is that in the top right tools nav with the headings Home, Services, People, Contact Us using Menu Module V2. The Heading Services has a drop down and this is where the issue resides. Roll over any of these nav devices and you will see they will highlight orange. Home is already auto activating its Selcted state. Click on Contact Us and it will do the same. Roll over and click on Services and it appears to have worked. While in Services roll over the drop down again and you will see all links have activated the Selected state. This is the issue. If you view the code of the Services UL you will see only the Services state has been alocated the Slected state. See below:
<li id="Services" class="selected">
<a href="/services.htm">Services</a>
<ul>
<li id="tools-panningdev">
<li id="tools-housing">
<li id="tools-urban-renewal">
<li id="tools-project-management">
<li id="tools-feasibility-tools">
<li id="tools-governance-systems">
<li id="tools-communications">
<li id="tools-projects">
</ul>
</li>
The CSS that runs the nav is as follows:
ul.dropdown {
    font-weight: normal;
    font-family: Arial, Helvetica, sans-serif;
    font-style: normal;
    text-decoration: none;
    ul.dropdown li {
    background-color: transparent;
    color: #999;
    padding-top: 5px;
    padding-right: 10px;
    padding-bottom: 5px;
    padding-left: 10px;
    font-size: 12px;
    ul.dropdown li.hover,
    ul.dropdown li:hover {
    background-color: transparent;
    color: #FFF;
    ul.dropdown a:link,
    ul.dropdown a:visited    {
    color: #FFF;
    text-decoration: none;
    ul.dropdown a:hover        { color: #ff871f; }
    ul.dropdown a:active    {
    color: #b33b00;
    /* -- level mark -- */
    ul.dropdown ul {
    width: 150px;
    margin-top: 1px;
    background-image: url(/images/nav-transparency.png);
    background-repeat: repeat;
    color: #FFF;
    ul.dropdown ul li {
    font-weight: normal;
ul.dropdown li.selected a {
    color: #ff871f;
The last entry 'ul.dropdown li.selected a {color: #ff871f;}' is required in order to allocate a Slected State. Without it not Selected state is active and the links al remian white.
I have tried all manner of combinations and additonal tags with no success. Any suggestions greatly appreciated. I have not modified the default Javascript provided by BC in the system apart from allocating the required ulTagClass as specified. The Javascript in the supplied 'container.html' is as follows:
<script type="text/javascript" >
    // ids need to be unique per page, use different ones if you are including multiple menus in the same page
    // id of the nav tag, used above
    var divTagId = "myMenu1";
    // desired id for 1st <ul> tag
    var ulTagId = "myMenu1List";
    // desired class for 1st <ul> tag
    var ulTagClass = "dropdown dropdown-vertical";
    if ((null !== ulTagId) && ("" !== ulTagId)) {
        document.getElementById(divTagId).getElementsByTagName("ul")[0].setAttribute("id",ulTagId );
    if ((null !== ulTagClass) && ("" !== ulTagClass)) {
        document.getElementById(divTagId).getElementsByTagName("ul")[0].className = ulTagClass;
    // this will set the selected state
    if ((null !== ulTagId) && ("" !== ulTagId)) {
        catSetSelectedCSSItem(ulTagId);
</script>
Lastly this is one of the recomended navs by BC at the following address: http://lwis.net/free-css-drop-down-menu/
I have used these before with success but for the life of me this has stumped me big time.

Hi Matthew,
Having a super quick look at the code I'd say it's because of:
ul.dropdown li.selected a {
    color: #ff871f;
This affects all the child elements.
To override this down the line you could do something like:
ul.dropdown li.selected ul li a {
    color: #fff;
This would override the parent link color when selected.
You could probably then also add:
ul.dropdown li.selected ul li.selected a {
    color: #ff871f;
For the dropdown selected states.
That's a quick look though so don't quote me too much

Select Statement issue

HI All,
    I have 10 records in a internal table. I have 20 records in a database table. i want those records from the database table which does not exists in internal table.Which is the better select statement for this situation with performance.
Regards,
Hazam

simplest way is just fetch all the records instead of checking each and every record of internal table with database table records.
select f1 f2 f3
       from mara
<b>       into table itab</b>
       where <condition>.
this will just replace all the existing records of ITAB with the new values.
here alternatively you can use <b>RANGES</b>. but if your primaarey key of that database table is only 1 field,then you can use RANGES. but if your WHERE condition fields also more,then this way of doing with RANGES is time consuming.
For example, if you are fetching data from MARA table,
RANGES R_MATNR FOR MARA-MATNR.
R_MATNR-SIGN = 'E'.
R_MATNR-OPTION = 'EQ'.
LOOP AT ITAB1.
R_MATNR-LOW = ITAB1-MATNR.
APPEND R_MATNR.
ENDLOOP.
Now R_MATNR will have all material nos fromn the first internal table.
then send this to select
SELECT * FROM MARA
<b>         APPENDING TABLE ITAB1</b>
         WHERE MATNR NOT IN R_MATNR.
Regards,
Srikanth
Message was edited by: Srikanth Kidambi
Message was edited by: Srikanth Kidambi

Select statement issue--urgent

Hi All,
i need information regarding below select statement.
SELECT ebelp
           ebeln
           vgabe
           SUM( menge ) AS menge
           shkzg
      FROM ekbe
      INTO TABLE t_ekbe
     WHERE ebeln EQ t_documents-ebeln
       AND ebelp EQ t_documents-ebelp
       AND ( vgabe EQ c_1
        OR   vgabe EQ c_2 )
     GROUP by ebelp ebeln vgabe shkzg.
I am working 4.5b version now.All the data declartion is correct.This select statement goes to Dump .when ever data is selected before the select statment.
let me any other choices to do same.its urgent.
Thanks,
Arnald

Hi...Arnald..
Try this way... Runtime error may be bcoz of the Order of fields....
types : begin of st_ekbe,
             EBELN TYPE EKBE-EBELN,
             EBELPTYPE EKBE-EBELP,
             VGABE TYPE EKBE-VGABE,
             SHKZG TYPE EKBE-SHKZG,
             MENGE TYPE EKBE-MENGE,
           end of st_ekbe.
DATA: T_EKBE TYPE TABLE OF ST_EKBE.
SELECT
ebeln
ebelp
vgabe
shkzg
SUM( menge )
FROM ekbe
INTO TABLE t_ekbe
WHERE ebeln EQ t_documents-ebeln
AND ebelp EQ t_documents-ebelp
AND ( vgabe EQ c_1
OR vgabe EQ c_2 )
GROUP by ebeln ebelp vgabe shkzg.
<b>Reward if Helpful</b>

Select statement issue- urgent pls help

Hi
The following select statement is always failed, even LIKP table has data. pls help me
LOOP AT LT_VBRP.
    IF LV_KEEP_VGBEL <> LT_VBRP-VGBEL.
      LV_KEEP_VGBEL = LT_VBRP-VGBEL.
      CLEAR LIKP.
      SELECT single VBELN TRAID TRATY VERUR BOLNR LFDAT
      FROM LIKP INTO
      (LIKP-VBELN,LIKP-TRAID,LIKP-TRATY,LIKP-VERUR,LIKP-BOLNR,LIKP-LFDAT)
        WHERE BOLNR = LT_VBRP-VGBEL.
      IF SY-SUBRC = 0.
        LV_ASN_FOUND = 'X'.
      ELSE.
        CLEAR LV_ASN_FOUND.
      ENDIF.
    ENDIF.
    MOVE-CORRESPONDING LT_VBRP TO LT_LIPOV.
    IF LV_ASN_FOUND = 'X'.
      LT_LIPOV-VBELN    = LIKP-VBELN.             "ASN #
      LT_LIPOV-LFDAT    = LIKP-LFDAT.
     lt_lipov-verur    = likp-verur.
      LT_LIPOV-BOLNR    = LIKP-BOLNR.             "DDL#
      LT_LIPOV-KOMAU    = LIKP-VBELN.
get the ASN line number details.
      SELECT VBELN POSNR MATNR ERDAT LFIMG ERNAM WERKS VGBEL VGPOS FROM LIPS INTO
      TABLE LT_LIPOV
       WHERE VBELN = LIKP-VBELN.
    ELSE.
      CLEAR LT_REP-VBELN.
      CLEAR LT_REP-LFDAT.
      CLEAR LT_REP-VERUR.
      CLEAR LT_REP-BOLNR.
      LT_REP-KOMAU = LT_VBRP-VBELN.             "Inv no
      LV_MESSAGE = TEXT-504.
      PERFORM CREATE_REPORT_RECORD_LIN01.
      LT_REP-LINE_COLOUR = 'C610'. " red Intensified
    ENDIF.
    APPEND LT_REP.
    APPEND LT_LIPOV.
    CLEAR LT_LIPOV.
    CLEAR LT_REP.
ENDLOOP.

Hi Kumar....
if statement should not be like ..
if lv_keep_vgbel lt_vbrp-vgbel.
Should be like this if lv_keep_vgbel = lt_vbrp-vgbel.
and try to use work area and table to select and loop the data...
Have YOu checked whether da data in it_vbrp...
there few error in way You are writing...
And one more thing in the table LIKP the field BOLNR is 35 Char and VGBEL of VBRP is 10 char ...and your are equalling that to extract the data which will not happen even..
So before select statement change VBRP-VGBEL as 35 char varible by using like this
data : v_vgbel type likp-bolnr.
loop at lt_vbrp.
if lv_keep_vgbel lt_vbrp-vgbel. " Why did you right the statement like this
    if lv_keep_vgbel = lt_vbrp-vgbel.
        clear likp.
            call function 'CONVERSION_EXIT_ALPHA_INPUT'
              exporting
                input = lt_vbrp-vgbel
              importing
                output = v_vgbel.
              select single vbeln traid traty verur bolnr lfdat
                                                  from likp into
                                                 (likp-vbeln,likp-traid,likp-traty,likp-verur,likp-bolnr,likp-lfdat)
                                                  where bolnr = v-vgbel.
regards,
sg
Edited by: Suneel Kumar Gopisetty on May 26, 2008 4:41 AM

No auditing for statements issued with 'by access/session'

SQL>audit delete on scott.dept by access;
Audit succeeded
SQL> noaudit delete on scott.dept by access;
noaudit delete on scott.dept by access
ORA-01718:cannot be used in by access or by sessionCan you please write down how to no audit this statement...????
I use Oracle10g v.2
Thank you
Sim

Try:
noaudit delete on scott.dept

Select statement on table of objects

My table is like this :-
CREATE OR REPLACE TYPE VALUE_T AS OBJECT ( PROPERTYVALUE VARCHAR2(4000) );
CREATE OR REPLACE TYPE PROPERTY_T AS OBJECT ( PROPERTYNAME VARCHAR2(128) , PROPERTYVALUE VALUE_T );
CREATE TABLE TEMP ( SESSIONID , PROPERTY PROPERTY_T );
Can i do query on column of type object and how? Something like this
SELECT * FORM TEMP WHERE PROPERTY.PROPERTYNAME='XYZ';
thanx

I got solution myself. It is
select t.command.command from T_AEDOIP t;
select t.command.objectname from T_AEDOIP t;
thanks to those who read this prob

How to stop excess goods issue against production order from MB1A

Hi Gurus,
In our organization goods issue against production order is done by using MB1A T.Code manually.Due to this reason sometimes excess quantity of RM issue against production order.Now I want to stop the excess goods issue against production order by using MB1A but I want to mainatain a certain tolerence.
Please advice what to do?
Regards
Nirmal

Hi ,
Use user exit MBCF0002
This is called when u do goods movement for production order.
Regards,
Vishal

PERFORMANCE PROBLEM - SYS OBJECTS

Hi all,
I'm having something strange here! The performance of queries that run against SYS objects like view DBA_OBJECTS , DBA_SEGMENTS, DBA_EXTENTS are VERY SLOWLY!! It's hang everytime and i need to kill the session and the PID process.
One example is the following:
SELECT owner, object_name, object_type FROM sys.all_objects
WHERE object_type IN ('PACKAGE', 'PROCEDURE', 'SEQUENCE', 'TABLE', 'TYPE',
'VIEW', 'FUNCTION') ORDER BY owner, object_name;
The objects of schema SYS was analyzed recently.
I have run the query with trace and nothing was found on that trace. The trace says the the query runs in few seconds but it didn't.
Any help?
Tks,
Paulo Portugal

Please take a look at the DBMS_XPLAN for the query to determine if there is a problem, and see if you are able to use DBA_OBJECTS rather than ALL_OBJECTS.
For example, on one of my databases, querying ALL_OBJECTS:
| Id | Operation                                               | Name       | Starts | E-Rows | A-Rows |   A-Time   | Buffers | OMem | 1Mem | Used-Mem |
|* 1 | TABLE ACCESS BY INDEX ROWID                            | SUM$       |      0 |      1 |      0 |00:00:00.01 |       0 |       |       |          |
|* 2 |   INDEX UNIQUE SCAN                                     | I_SUM$_1   |      0 |      1 |      0 |00:00:00.01 |       0 |       |       |          |
|   3 | SORT ORDER BY                                          |            |      1 |    294 |   7329 |00:00:01.10 |     151K|   407K|   407K| 361K (0)|
|* 4 |   FILTER                                                |            |      1 |        |   7329 |00:00:01.07 |     151K|       |       |          |
|* 5 |    HASH JOIN                                            |            |      1 | 14668 | 14672 |00:00:00.09 |     196 | 1155K| 1155K| 1175K (0)|
|   6 |     TABLE ACCESS FULL                                   | USER$      |      1 |    157 |    157 |00:00:00.01 |      15 |       |       |          |
|* 7 |     TABLE ACCESS FULL                                   | OBJ$       |      1 | 14668 | 14672 |00:00:00.02 |     181 |       |       |          |
|* 8 |    TABLE ACCESS BY INDEX ROWID                          | IND$       |   2575 |      1 |   2409 |00:00:00.04 |    5157 |       |       |          |
|* 9 |     INDEX UNIQUE SCAN                                   | I_IND1     |   2575 |      1 |   2575 |00:00:00.02 |    2577 |       |       |          |
| 10 |     NESTED LOOPS                                        |            |   9134 |     28 |   4291 |00:00:00.83 |     145K|       |       |          |
| 11 |      FIXED TABLE FULL                                   | X$KZSRO    |   9134 |     26 | 68239 |00:00:00.13 |       0 |       |       |          |
|* 12 |      INDEX RANGE SCAN                                   | I_OBJAUTH1 | 68239 |      1 |   4291 |00:00:00.55 |     145K|       |       |          |
|* 13 |       FIXED TABLE FULL                                  | X$KZSPR    |      1 |     14 |      1 |00:00:00.01 |       0 |       |       |          |
|* 14 |        FIXED TABLE FULL                                 | X$KZSPR    |      1 |      6 |      1 |00:00:00.01 |       0 |       |       |          |
|* 15 |         FIXED TABLE FULL                                | X$KZSPR    |      1 |      3 |      1 |00:00:00.01 |       0 |       |       |          |
|* 16 |          FIXED TABLE FULL                               | X$KZSPR    |      1 |      3 |      1 |00:00:00.01 |       0 |       |       |          |
|* 17 |           FIXED TABLE FULL                              | X$KZSPR    |      1 |      3 |      1 |00:00:00.01 |       0 |       |       |          |
|* 18 |            FIXED TABLE FULL                             | X$KZSPR    |      1 |      6 |      1 |00:00:00.01 |       0 |       |       |          |
|* 19 |             FIXED TABLE FULL                            | X$KZSPR    |      1 |     11 |      1 |00:00:00.01 |       0 |       |       |          |
|* 20 |              FIXED TABLE FULL                           | X$KZSPR    |      1 |      3 |      1 |00:00:00.01 |       0 |       |       |          |
|* 21 |               FIXED TABLE FULL                          | X$KZSPR    |      0 |     14 |      0 |00:00:00.01 |       0 |       |       |          |
|* 22 |                FIXED TABLE FULL                         | X$KZSPR    |      1 |     11 |      1 |00:00:00.01 |       0 |       |       |          |
|* 23 |                 FIXED TABLE FULL                        | X$KZSPR    |      1 |     11 |      1 |00:00:00.01 |       0 |       |       |          |
|* 24 |                  FIXED TABLE FULL                       | X$KZSPR    |      1 |      3 |      1 |00:00:00.01 |       0 |       |       |          |
|* 25 |                   FIXED TABLE FULL                      | X$KZSPR    |      1 |      3 |      0 |00:00:00.01 |       0 |       |       |          |
|* 26 |                    FIXED TABLE FULL                     | X$KZSPR    |      1 |      6 |      1 |00:00:00.01 |       0 |       |       |          |
|* 27 |                     FIXED TABLE FULL                    | X$KZSPR    |      1 |     11 |      1 |00:00:00.01 |       0 |       |       |          |
|* 28 |                      FIXED TABLE FULL                   | X$KZSPR    |      1 |      6 |      1 |00:00:00.01 |       0 |       |       |          |
|* 29 |                       FIXED TABLE FULL                  | X$KZSPR    |      1 |      6 |      1 |00:00:00.01 |       0 |       |       |          |
|* 30 |                        FIXED TABLE FULL                 | X$KZSPR    |      1 |      6 |      1 |00:00:00.01 |       0 |       |       |          |
|* 31 |                         FIXED TABLE FULL                | X$KZSPR    |      0 |     14 |      0 |00:00:00.01 |       0 |       |       |          |
|* 32 |                          FIXED TABLE FULL               | X$KZSPR    |      0 |     11 |      0 |00:00:00.01 |       0 |       |       |          |
|* 33 |                           FIXED TABLE FULL              | X$KZSPR    |      0 |      6 |      0 |00:00:00.01 |       0 |       |       |          |
| 34 |                            VIEW                         |            |      0 |      1 |      0 |00:00:00.01 |       0 |       |       |          |
| 35 |                             FAST DUAL                   |            |      0 |      1 |      0 |00:00:00.01 |       0 |       |       |          |
|* 36 |                              TABLE ACCESS BY INDEX ROWID| SUM$       |      0 |      1 |      0 |00:00:00.01 |       0 |       |       |          |
|* 37 |                               INDEX UNIQUE SCAN         | I_SUM$_1   |      0 |      1 |      0 |00:00:00.01 |       0 |       |       |          |
Predicate Information (identified by operation id):
   1 - filter(BITAND("S"."XPFLAGS",8388608)=8388608)
   2 - access("S"."OBJ#"=:B1)
   4 - filter(((("O"."TYPE#"<>1 AND "O"."TYPE#"<>10) OR ("O"."TYPE#"=1 AND =1)) AND (INTERNAL_FUNCTION("O"."OWNER#") OR ("O"."TYPE#"<>11 AND
              "O"."TYPE#"<>14 AND IS NOT NULL) OR (INTERNAL_FUNCTION("O"."TYPE#") AND IS NOT NULL) OR ("O"."TYPE#"=13 AND IS NOT NULL) OR ("O"."TYPE#"=11 AND
               IS NOT NULL) OR ("O"."TYPE#"=12 AND IS NOT NULL) OR ("O"."TYPE#"=6 AND IS NOT NULL) OR (INTERNAL_FUNCTION("O"."TYPE#") AND IS NOT NULL) OR
              ("O"."TYPE#"=22 AND IS NOT NULL) OR ("O"."TYPE#"=14 AND IS NOT NULL) OR INTERNAL_FUNCTION("O"."TYPE#") OR ("O"."TYPE#"=33 AND IS NOT NULL) OR
              ("O"."TYPE#"=46 AND IS NOT NULL) OR ("O"."TYPE#"=62 AND IS NOT NULL) OR ("O"."TYPE#"=66 AND IS NOT NULL) OR ("O"."TYPE#"=48 AND IS NOT NULL)
              OR ("O"."TYPE#"=44 AND IS NOT NULL) OR ("O"."TYPE#"=59 AND IS NOT NULL) OR ("O"."TYPE#"=23 AND IS NOT NULL) OR ("O"."TYPE#"=68 AND IS NOT
              NULL) OR (INTERNAL_FUNCTION("O"."TYPE#") AND IS NOT NULL) OR ("O"."TYPE#"=42 AND IS NOT NULL) OR ("O"."TYPE#"=32 AND IS NOT NULL) OR
              ("O"."TYPE#"=81 AND IS NOT NULL) OR ("O"."TYPE#"=55 AND =1)) AND (DECODE("O"."TYPE#",0,'NEXT
              OBJECT',1,'INDEX',2,'TABLE',3,'CLUSTER',4,'VIEW',5,'SYNONYM',6,'SEQUENCE',7,'PROCEDURE',8,'FUNCTION',9,'PACKAGE',11,'PACKAGE
              BODY',12,'TRIGGER',13,'TYPE',14,'TYPE BODY',19,'TABLE PARTITION',20,'INDEX PARTITION',21,'LOB',22,'LIBRARY',23,'DIRECTORY',24,'QUEUE',28,'JAVA
              SOURCE',29,'JAVA CLASS',30,'JAVA RESOURCE',32,'INDEXTYPE',33,'OPERATOR',34,'TABLE SUBPARTITION',35,'INDEX SUBPARTITION',40,'LOB PARTITION',41,'LOB
              SUBPARTITION',42,NVL(,'MATERIALIZED VIEW'),43,'DIMENSION',44,'CONTEXT',46,'RULE SET',47,'RESOURCE PLAN',48,'CONSUMER GROUP',55,'XML
              SCHEMA',56,'JAVA DATA',57,'SECURITY PROFILE',59,'RULE',60,'CAPTURE',61,'APPLY',62,'EVALUATION CONTEXT',66,'JOB',67,'PROGRAM',68,'JOB
              CLASS',69,'WINDOW',72,'WINDOW GROUP',74,'SCHEDULE',79,'CHAIN',81,'FILE GROUP','UNDEFINED')='PACKAGE' OR DECODE("O"."TYPE#",0,'NEXT
              OBJECT',1,'INDEX',2,'TABLE',3,'CLUSTER',4,'VIEW',5,'SYNONYM',6,'SEQUENCE',7,'PROCEDURE',8,'FUNCTION',9,'PACKAGE',11,'PACKAGE
              BODY',12,'TRIGGER',13,'TYPE',14,'TYPE BODY',19,'TABLE PARTITION',20,'INDEX PARTITION',21,'LOB',22,'LIBRARY',23,'DIRECTORY',24,'QUEUE',28,'JAVA
              SOURCE',29,'JAVA CLASS',30,'JAVA RESOURCE',32,'INDEXTYPE',33,'OPERATOR',34,'TABLE SUBPARTITION',35,'INDEX SUBPARTITION',40,'LOB PARTITION',41,'LOB
              SUBPARTITION',42,NVL(,'MATERIALIZED VIEW'),43,'DIMENSION',44,'CONTEXT',46,'RULE SET',47,'RESOURCE PLAN',48,'CONSUMER GROUP',55,'XML
              SCHEMA',56,'JAVA DATA',57,'SECURITY PROFILE',59,'RULE',60,'CAPTURE',61,'APPLY',62,'EVALUATION CONTEXT',66,'JOB',67,'PROGRAM',68,'JOB
              CLASS',69,'WINDOW',72,'WINDOW GROUP',74,'SCHEDULE',79,'CHAIN',81,'FILE GROUP','UNDEFINED')='PROCEDURE' OR DECODE("O"."TYPE#",0,'NEXT
              OBJECT',1,'INDEX',2,'TABLE',3,'CLUSTER',4,'VIEW',5,'SYNONYM',6,'SEQUENCE',7,'PROCEDURE',8,'FUNCTION',9,'PACKAGE',11,'PACKAGE
              BODY',12,'TRIGGER',13,'TYPE',14,'TYPE BODY',19,'TABLE PARTITION',20,'INDEX PARTITION',21,'LOB',22,'LIBRARY',23,'DIRECTORY',24,'QUEUE',28,'JAVA
              SOURCE',29,'JAVA CLASS',30,'JAVA RESOURCE',32,'INDEXTYPE',33,'OPERATOR',34,'TABLE SUBPARTITION',35,'INDEX SUBPARTITION',40,'LOB PARTITION',41,'LOB
              SUBPARTITION',42,NVL(,'MATERIALIZED VIEW'),43,'DIMENSION',44,'CONTEXT',46,'RULE SET',47,'RESOURCE PLAN',48,'CONSUMER GROUP',55,'XML
              SCHEMA',56,'JAVA DATA',57,'SECURITY PROFILE',59,'RULE',60,'CAPTURE',61,'APPLY',62,'EVALUATION CONTEXT',66,'JOB',67,'PROGRAM',68,'JOB
              CLASS',69,'WINDOW',72,'WINDOW GROUP',74,'SCHEDULE',79,'CHAIN',81,'FILE GROUP','UNDEFINED')='SEQUENCE' OR DECODE("O"."TYPE#",0,'NEXT
              OBJECT',1,'INDEX',2,'TABLE',3,'CLUSTER',4,'VIEW',5,'SYNONYM',6,'SEQUENCE',7,'PROCEDURE',8,'FUNCTION',9,'PACKAGE',11,'PACKAGE
              BODY',12,'TRIGGER',13,'TYPE',14,'TYPE BODY',19,'TABLE PARTITION',20,'INDEX PARTITION',21,'LOB',22,'LIBRARY',23,'DIRECTORY',24,'QUEUE',28,'JAVA
              SOURCE',29,'JAVA CLASS',30,'JAVA RESOURCE',32,'INDEXTYPE',33,'OPERATOR',34,'TABLE SUBPARTITION',35,'INDEX SUBPARTITION',40,'LOB PARTITION',41,'LOB
              SUBPARTITION',42,NVL(,'MATERIALIZED VIEW'),43,'DIMENSION',44,'CONTEXT)
   5 - access("O"."OWNER#"="U"."USER#")
   7 - filter(("O"."NAME"<>'_NEXT_OBJECT' AND "O"."NAME"<>'_default_auditing_options_' AND "O"."LINKNAME" IS NULL))
   8 - filter(("I"."TYPE#"=1 OR "I"."TYPE#"=2 OR "I"."TYPE#"=3 OR "I"."TYPE#"=4 OR "I"."TYPE#"=6 OR "I"."TYPE#"=7 OR "I"."TYPE#"=9))
   9 - access("I"."OBJ#"=:B1)
12 - access("OBJ#"=:B1 AND "GRANTEE#"="KZSROROL")
       filter((INTERNAL_FUNCTION("PRIVILEGE#") AND "GRANTEE#"="KZSROROL"))
13 - filter((((-"KZSPRPRV")=(-45) OR (-"KZSPRPRV")=(-47) OR (-"KZSPRPRV")=(-48) OR (-"KZSPRPRV")=(-49) OR (-"KZSPRPRV")=(-50)) AND
              "INST_ID"=USERENV('INSTANCE')))
14 - filter((((-"KZSPRPRV")=(-184) OR (-"KZSPRPRV")=(-181)) AND "INST_ID"=USERENV('INSTANCE')))
15 - filter(((-"KZSPRPRV")=(-141) AND "INST_ID"=USERENV('INSTANCE')))
16 - filter(((-"KZSPRPRV")=(-152) AND "INST_ID"=USERENV('INSTANCE')))
17 - filter(((-"KZSPRPRV")=(-109) AND "INST_ID"=USERENV('INSTANCE')))
18 - filter((((-"KZSPRPRV")=(-144) OR (-"KZSPRPRV")=(-141)) AND "INST_ID"=USERENV('INSTANCE')))
19 - filter((((-"KZSPRPRV")=(-189) OR (-"KZSPRPRV")=(-190) OR (-"KZSPRPRV")=(-191) OR (-"KZSPRPRV")=(-192)) AND "INST_ID"=USERENV('INSTANCE')))
20 - filter(((-"KZSPRPRV")=(-181) AND "INST_ID"=USERENV('INSTANCE')))
21 - filter((((-"KZSPRPRV")=(-200) OR (-"KZSPRPRV")=(-201) OR (-"KZSPRPRV")=(-202) OR (-"KZSPRPRV")=(-203) OR (-"KZSPRPRV")=(-204)) AND
              "INST_ID"=USERENV('INSTANCE')))
22 - filter((((-"KZSPRPRV")=(-251) OR (-"KZSPRPRV")=(-252) OR (-"KZSPRPRV")=(-253) OR (-"KZSPRPRV")=(-254)) AND "INST_ID"=USERENV('INSTANCE')))
23 - filter((((-"KZSPRPRV")=(-246) OR (-"KZSPRPRV")=(-247) OR (-"KZSPRPRV")=(-248) OR (-"KZSPRPRV")=(-249)) AND "INST_ID"=USERENV('INSTANCE')))
24 - filter(((-"KZSPRPRV")=(-265) AND "INST_ID"=USERENV('INSTANCE')))
25 - filter(((-"KZSPRPRV")=12 AND "INST_ID"=USERENV('INSTANCE')))
26 - filter((((-"KZSPRPRV")=(-222) OR (-"KZSPRPRV")=(-223)) AND "INST_ID"=USERENV('INSTANCE')))
27 - filter((((-"KZSPRPRV")=(-258) OR (-"KZSPRPRV")=(-259) OR (-"KZSPRPRV")=(-260) OR (-"KZSPRPRV")=(-261)) AND "INST_ID"=USERENV('INSTANCE')))
28 - filter((((-"KZSPRPRV")=(-177) OR (-"KZSPRPRV")=(-178)) AND "INST_ID"=USERENV('INSTANCE')))
29 - filter((((-"KZSPRPRV")=(-268) OR (-"KZSPRPRV")=(-267)) AND "INST_ID"=USERENV('INSTANCE')))
30 - filter((((-"KZSPRPRV")=(-265) OR (-"KZSPRPRV")=(-266)) AND "INST_ID"=USERENV('INSTANCE')))
31 - filter((((-"KZSPRPRV")=(-45) OR (-"KZSPRPRV")=(-47) OR (-"KZSPRPRV")=(-48) OR (-"KZSPRPRV")=(-49) OR (-"KZSPRPRV")=(-50)) AND
              "INST_ID"=USERENV('INSTANCE')))
32 - filter((((-"KZSPRPRV")=(-205) OR (-"KZSPRPRV")=(-206) OR (-"KZSPRPRV")=(-207) OR (-"KZSPRPRV")=(-208)) AND "INST_ID"=USERENV('INSTANCE')))
33 - filter((((-"KZSPRPRV")=(-277) OR (-"KZSPRPRV")=(-278)) AND "INST_ID"=USERENV('INSTANCE')))
36 - filter(BITAND("S"."XPFLAGS",8388608)=8388608)
37 - access("S"."OBJ#"=:B1)Querying DBA_OBJECTS produces a much more compact plan that executes faster:
| Id | Operation                        | Name        | Starts | E-Rows | A-Rows |   A-Time   | Buffers | OMem | 1Mem | Used-Mem |
|   1 | SORT ORDER BY                   |             |      1 |    814 |   7329 |00:00:00.24 |    5353 |   407K|   407K| 361K (0)|
|   2 |   VIEW                           | DBA_OBJECTS |      1 |    814 |   7329 |00:00:00.21 |    5353 |       |       |          |
|   3 |    UNION-ALL                     |             |      1 |        |   7329 |00:00:00.21 |    5353 |       |       |          |
|* 4 |     FILTER                       |             |      1 |        |   7329 |00:00:00.19 |    5353 |       |       |          |
|* 5 |      HASH JOIN                   |             |      1 | 14668 | 14672 |00:00:00.09 |     196 | 1155K| 1155K| 1209K (0)|
|   6 |       TABLE ACCESS FULL          | USER$       |      1 |    157 |    157 |00:00:00.01 |      15 |       |       |          |
|* 7 |       TABLE ACCESS FULL          | OBJ$        |      1 | 14668 | 14672 |00:00:00.03 |     181 |       |       |          |
|* 8 |      TABLE ACCESS BY INDEX ROWID | IND$        |   2575 |      1 |   2409 |00:00:00.04 |    5157 |       |       |          |
|* 9 |       INDEX UNIQUE SCAN          | I_IND1      |   2575 |      1 |   2575 |00:00:00.02 |    2577 |       |       |          |
|* 10 |       TABLE ACCESS BY INDEX ROWID| SUM$        |      0 |      1 |      0 |00:00:00.01 |       0 |       |       |          |
|* 11 |        INDEX UNIQUE SCAN         | I_SUM$_1    |      0 |      1 |      0 |00:00:00.01 |       0 |       |       |          |
|* 12 |     FILTER                       |             |      1 |        |      0 |00:00:00.01 |       0 |       |       |          |
| 13 |      NESTED LOOPS                |             |      0 |      5 |      0 |00:00:00.01 |       0 |       |       |          |
| 14 |       INDEX FULL SCAN            | I_LINK1     |      0 |      5 |      0 |00:00:00.01 |       0 |       |       |          |
| 15 |       TABLE ACCESS CLUSTER       | USER$       |      0 |      1 |      0 |00:00:00.01 |       0 |       |       |          |
|* 16 |        INDEX UNIQUE SCAN         | I_USER#     |      0 |      1 |      0 |00:00:00.01 |       0 |       |       |          |
Predicate Information (identified by operation id):
   4 - filter(((("O"."TYPE#"<>1 AND "O"."TYPE#"<>10) OR ("O"."TYPE#"=1 AND =1)) AND (DECODE("O"."TYPE#",0,'NEXT
              OBJECT',1,'INDEX',2,'TABLE',3,'CLUSTER',4,'VIEW',5,'SYNONYM',6,'SEQUENCE',7,'PROCEDURE',8,'FUNCTION',9,'PACKAGE',11,'PACKAGE
              BODY',12,'TRIGGER',13,'TYPE',14,'TYPE BODY',19,'TABLE PARTITION',20,'INDEX
              PARTITION',21,'LOB',22,'LIBRARY',23,'DIRECTORY',24,'QUEUE',28,'JAVA SOURCE',29,'JAVA CLASS',30,'JAVA
              RESOURCE',32,'INDEXTYPE',33,'OPERATOR',34,'TABLE SUBPARTITION',35,'INDEX SUBPARTITION',40,'LOB PARTITION',41,'LOB
              SUBPARTITION',42,NVL(,'MATERIALIZED VIEW'),43,'DIMENSION',44,'CONTEXT',46,'RULE SET',47,'RESOURCE PLAN',48,'CONSUMER
              GROUP',51,'SUBSCRIPTION',52,'LOCATION',55,'XML SCHEMA',56,'JAVA DATA',57,'SECURITY
              PROFILE',59,'RULE',60,'CAPTURE',61,'APPLY',62,'EVALUATION CONTEXT',66,'JOB',67,'PROGRAM',68,'JOB
              CLASS',69,'WINDOW',72,'WINDOW GROUP',74,'SCHEDULE',79,'CHAIN',81,'FILE GROUP','UNDEFINED')='PACKAGE' OR
              DECODE("O"."TYPE#",0,'NEXT OBJECT',1,'INDEX',2,'TABLE',3,'CLUSTER',4,'VIEW',5,'SYNONYM',6,'SEQUENCE',7,'PROCEDURE',8,'FUNCTIO
              N',9,'PACKAGE',11,'PACKAGE BODY',12,'TRIGGER',13,'TYPE',14,'TYPE BODY',19,'TABLE PARTITION',20,'INDEX
              PARTITION',21,'LOB',22,'LIBRARY',23,'DIRECTORY',24,'QUEUE',28,'JAVA SOURCE',29,'JAVA CLASS',30,'JAVA
              RESOURCE',32,'INDEXTYPE',33,'OPERATOR',34,'TABLE SUBPARTITION',35,'INDEX SUBPARTITION',40,'LOB PARTITION',41,'LOB
              SUBPARTITION',42,NVL(,'MATERIALIZED VIEW'),43,'DIMENSION',44,'CONTEXT',46,'RULE SET',47,'RESOURCE PLAN',48,'CONSUMER
              GROUP',51,'SUBSCRIPTION',52,'LOCATION',55,'XML SCHEMA',56,'JAVA DATA',57,'SECURITY
              PROFILE',59,'RULE',60,'CAPTURE',61,'APPLY',62,'EVALUATION CONTEXT',66,'JOB',67,'PROGRAM',68,'JOB
              CLASS',69,'WINDOW',72,'WINDOW GROUP',74,'SCHEDULE',79,'CHAIN',81,'FILE GROUP','UNDEFINED')='PROCEDURE' OR
              DECODE("O"."TYPE#",0,'NEXT OBJECT',1,'INDEX',2,'TABLE',3,'CLUSTER',4,'VIEW',5,'SYNONYM',6,'SEQUENCE',7,'PROCEDURE',8,'FUNCTIO
              N',9,'PACKAGE',11,'PACKAGE BODY',12,'TRIGGER',13,'TYPE',14,'TYPE BODY',19,'TABLE PARTITION',20,'INDEX
              PARTITION',21,'LOB',22,'LIBRARY',23,'DIRECTORY',24,'QUEUE',28,'JAVA SOURCE',29,'JAVA CLASS',30,'JAVA
              RESOURCE',32,'INDEXTYPE',33,'OPERATOR',34,'TABLE SUBPARTITION',35,'INDEX SUBPARTITION',40,'LOB PARTITION',41,'LOB
              SUBPARTITION',42,NVL(,'MATERIALIZED VIEW'),43,'DIMENSION',44,'CONTEXT',46,'RULE SET',47,'RESOURCE PLAN',48,'CONSUMER
              GROUP',51,'SUBSCRIPTION',52,'LOCATION',55,'XML SCHEMA',56,'JAVA DATA',57,'SECURITY
              PROFILE',59,'RULE',60,'CAPTURE',61,'APPLY',62,'EVALUATION CONTEXT',66,'JOB',67,'PROGRAM',68,'JOB
              CLASS',69,'WINDOW',72,'WINDOW GROUP',74,'SCHEDULE',79,'CHAIN',81,'FILE GROUP','UNDEFINED')='SEQUENCE' OR
              DECODE("O"."TYPE#",0,'NEXT OBJECT',1,'INDEX',2,'TABLE',3,'CLUSTER',4,'VIEW',5,'SYNONYM',6,'SEQUENCE',7,'PROCEDURE',8,'FUNCTIO
              N',9,'PACKAGE',11,'PACKAGE BODY',12,'TRIGGER',13,'TYPE',14,'TYPE BODY',19,'TABLE PARTITION',20,'INDEX
              PARTITION',21,'LOB',22,'LIBRARY',23,'DIRECTORY',24,'QUEUE',28,'JAVA SOURCE',29,'JAVA CLASS',30,'JAVA
              RESOURCE',32,'INDEXTYPE',33,'OPERATOR',34,'TABLE SUBPARTITION',35,'INDEX SUBPARTITION',40,'LOB PARTITION',41,'LOB
              SUBPARTITION',42,NVL(,'MATERIALIZED VIEW'),43,'DIMENSION',44,'CONTEXT',46,'RULE SET',47,'RESOURCE PLAN',48,'CONSUMER
              GROUP',51,'SUBSCRIPTION',52,'LOCATION',55,'XML SCHEMA',56,'JAVA DATA',57,'SECURITY
              PROFILE',59,'RULE',60,'CAPTURE',61,'APPLY',62,'EVALUATION CONTEXT',66,'JOB',67,'PROGRAM',68,'JOB
              CLASS',69,'WINDOW',72,'WINDOW GROUP',74,'SCHEDULE',79,'CHAIN',81,'FILE GROUP','UNDEFINED')='TABLE' OR
              DECODE("O"."TYPE#",0,'NEXT OBJECT',1,'INDEX',2,'TABLE',3,'CLUSTER',4,'VIEW',5,'SYNONYM',6,'SEQUENCE',7,'PROCEDURE',8,'FUNCTIO
              N',9,'PACKAGE',11,'PACKAGE BODY',12,'TRIGGER',13,'TYPE',14,'TYPE BODY',19,'TABLE PARTITION',20,'INDEX
              PARTITION',21,'LOB',22,'LIBRARY',23,'DIRECTORY',24,'QUEUE',28,'JAVA SOURCE',29,'JAVA CLASS',30,'JAVA
              RESOURCE',32,'INDEXTYPE',33,'OPERATOR',34,'TABLE SUBPARTITION',35,'INDEX SUBPARTITION',40,'LOB PARTITION',41,'LOB
              SUBPARTITION',42,NVL(,'MATERIALIZED VIEW'),43,'DIMENSION',44,'CONTEXT',46,'RULE SET',47,'RESOURCE PLAN',48,'CONSU)
   5 - access("O"."OWNER#"="U"."USER#")
   7 - filter(("O"."NAME"<>'_NEXT_OBJECT' AND "O"."NAME"<>'_default_auditing_options_' AND "O"."LINKNAME" IS NULL))
   8 - filter(("I"."TYPE#"=1 OR "I"."TYPE#"=2 OR "I"."TYPE#"=3 OR "I"."TYPE#"=4 OR "I"."TYPE#"=6 OR "I"."TYPE#"=7 OR
              "I"."TYPE#"=9))
   9 - access("I"."OBJ#"=:B1)
10 - filter(BITAND("S"."XPFLAGS",8388608)=8388608)
11 - access("S"."OBJ#"=:B1)
12 - filter('DATABASE LINK'='FUNCTION')
16 - access("L"."OWNER#"="U"."USER#")Example of using DBMS_XPLAN to retrieve actual timing:
http://jonathanlewis.wordpress.com/2006/11/09/dbms_xplan-in-10g/
Charles Hooper
IT Manager/Oracle DBA
K&M Machine-Fabricating, Inc.

Jdev9i, JSP, Execute a Sql Select statement directly?

Hi,
I need the syntax to execute a Sql SELECT statement directly against Oracle database and access rows(returned by SELECT statemnet) in a JSP page or Servlet? Any sample code available for this.
Thanks.

Hi Ali,
I didn't work a lot with jsp ,but on this url some help .
http://otn.oracle.com/docs/products/oracle8i/doc_library/817_doc/java.817/a83726/basics7.htm#1014578

How to find SQL Statement fired using SYS.AUD$ - Database Auditing

Dear Friends
I am having Oracle 9i Database and have configured it with database auditing option by setting the following parameter in init.ora file
AUDIT_TRAIL = "DB"
I want to audit SELECT, INSERT , UPDATE and DELETE operations on PRACTICE.EMP table for which I did :
1) Logged in as SYS
2) SQL> AUDIT SELECT, INSERT, UPDATE, DELETE
ON PRACTICE.EMP
BY ACCESS
WHENEVER SUCCESSFUL;
Audit Succedded
Now how should I find out the SQL statement that does the insert, update or delete operation on the EMP table using SYS.AUD$ table
Thanks

Hi,
It's contents can be viewed directly or via the following views:
* DBA_AUDIT_EXISTS
* DBA_AUDIT_OBJECT
* DBA_AUDIT_SESSION
* DBA_AUDIT_STATEMENT
* DBA_AUDIT_TRAIL
* DBA_OBJ_AUDIT_OPTS
* DBA_PRIV_AUDIT_OPTS
* DBA_STMT_AUDIT_OPTS
The audit trail contains a lot of data, but the following are most likely to be of interest:
* Username : Oracle Username.
* Terminal : Machine that the user performed the action from.
* Timestamp : When the action occured.
* Object Owner : The owner of the object that was interacted with.
* Object Name : The name of the object that was interacted with.
* Action Name : The action that occured against the object. (INSERT, UPDATE, DELETE, SELECT, EXECUTE)
So, take a look at action_name column from DBA_AUDIT_TRAIL view.
Cheers
Legatti

Is there any way to Mask the Name when a select statement is issued?

Dear all,
Is there any way to mask the name .. i mean if User issue a select statement in a customer table the real name should come like ' ABCXXXDEFXXCFXX'... Which is not the actual name?
e.g if Name: CHIEV SONG MEE
If user issue a statment select * from customers;
The Result Should come something Like this:
Name
CHXXV SXNG MXX
Thank You

user3029023 wrote:
but it seems there is no option in oracle it self which can be used as there they are saying to get a data masking software which we can't due to some internal issues....I would not say that. How one implements masking depends entirely on the requirements that need to be met.
For example, schema A owns all the tables. Schema B can be created as a "trusted" schema - in other words, schema A trusts schema B and allows it full access (with grants) to its tables. Schema B implements data masking as views. For each table in A, a view exists in B that implements the required masking. B can now grant select access on these views to user C. User C will see the same data object names in B as it would have if it used A - only, by using the B data objects it uses masked data objects and not the original source data objects.
Another example - schema Dev is to have all the data objects of schema Prod, but masked where needed. One can use CTAS (Create Table As Select) to create the required tables in Dev with masked values where relevant. This Dev schema can be "refreshed" on weekends by dropping all tables and getting a new fresh copy of production data and masking it - ready for the next week's development cycle.
If the application use is for example APEX, then instead of coding SQL directly as reporting regions to display, a function is used instead. APEX supports reporting regions where it calls a function and this function provides the APEX run-time with the SQL to execute and contents to render. It is easy to use this approach to implement logic in functions that masked column data depending on who the APEX user is, the security/role attributes of the user, and so on.
No there is not a single "+mask this column!+" feature in Oracle.. but that does not mean that such a feature is not supported and cannot be implemented. Oracle has a very comprehensive and rich set of tools - more so than most (if not all) other RDBMS products.
It is up to the architect/designer/developer to use this toolkit in creating a system that meets the specific requirements at hand.

Auditing a select statement

Hi,
Database version: 10.2.0.3
There are several application users in our database. Say A,B,C and D.
A,B and C query data from schema D. We want to audit the select queries fired by user A (in order to fetch data from D).
B and C can fire select statements but should not be audited.
How can I achieve this? Can dbms_fga a solution for this, is yes then how?
Regards,

Assuming that the "fireid" user is to be audited.
CONNECT sys/password AS SYSDBA
AUDIT ALL BY fireid BY ACCESS;
AUDIT SELECT TABLE, UPDATE TABLE, INSERT TABLE, DELETE TABLE BY fireid BY ACCESS;
AUDIT EXECUTE PROCEDURE BY fireid BY ACCESS;
we can see the audits according to the user you have provided.
for more reference visit ORACLE-BASE - Auditing in Oracle 10g Release 2

Stop auditing select statements issued against SYS objects

Similar Messages

Maybe you are looking for