Skip to Main Content

Database Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

database audit - statement vs privilege auditing - confused

User_UAEUZMar 4 2016 — edited Mar 9 2016

Hi all,

I am confuse about the difference between the 2 and the usage of

dba_priv_audit_opts vs dba_stmt_audit_opts


It is stated that

privilege auditing - audit the usage of the a system privilege

statement auditing - audit the execution of a SQL command/statement



Q1) when I want to AUDIT the action of GRANTING "create table" privilege (e.g.  grant create table to xxx; ),   should it fall under privilege or statement auditing ? 


Q2) when I wanted to AUDIT the action of actually creating a table (e.g. create table testable);  should it fall under privilege or statement auditing ?


I am not able to test which is actually used, because everything I type "AUDIT CREATE TABLE" , the entry get added into both the  DBA_PRIV_AUDIT_OPTS and DBA_STMT_AUDIT_OPTS as well.


One can argue that CREATE TABLE xxx; of actually creating the table is BOTH statement and privilege because

a) when I CREATE TABLE xxx, I am using a system privilege "create table"

b)  when I CREATE TABLE xxx, I am executing a sql statement  which I want it to be monitored.


I am not sure if I am making sense, can any gurus straightened me out ?


Regards,

Noob


This post has been answered by Pavan Kumar on Mar 9 2016
Jump to Answer
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Apr 6 2016
Added on Mar 4 2016
11 comments
3,082 views