Oracle DB 11.2.0.4
SQL Developer
4.0.2.15 (Build 15.21)
Java(TM) Platform 1.7.0_60
Oracle IDE 4.0.2.15.21
I noticed that when dropping an Oracle database user, via SQL Developer, the tool also seems to perform one INSERT a bunch of DELETEs into MDSYS-owned tables. I'd like to find out why or if there is some type of explanation. Because this was reported on a Sarbanes-Oxley report that was sent to my upper management, I need to provide a valid explanation as to why this person performed DML against these tables.
Here is what I gleaned from sys.aud$. The action sequence starts at the bottom and work your way up.
The actions performed by the Security Admin were: he created the user, which included two GRANTs, and then he dropped the user because he had created it incorrectly. I was able to reproduce the exact sequence of events.
| ACTIONSPERFORMED | OBJ$CREATOR | OBJ$NAME |
| DROP USER | N/A | TESTUSER |
| DELETE ROW | MDSYS | SDO_NETWORK_TIMESTAMPS |
| DELETE ROW | MDSYS | SDO_NETWORK_HISTORIES |
| DELETE ROW | MDSYS | SDO_NETWORK_USER_DATA |
| DELETE ROW | MDSYS | SDO_NETWORK_LOCKS_WM |
| DELETE ROW | MDSYS | SDO_NETWORK_CONSTRAINTS |
| DELETE ROW | MDSYS | SDO_NETWORK_METADATA_TABLE |
| DELETE ROW | MDSYS | SDO_GEOR_DDL__TABLE$$ |
| DELETE ROW | MDSYS | SDO_TIN_PC_SEQ |
| DELETE ROW | MDSYS | SDO_TIN_PC_SYSDATA_TABLE |
| DELETE ROW | MDSYS | SDO_GEOR_SYSDATA_TABLE |
| DELETE ROW | MDSYS | SDO_ANNOTATION_TEXT_METADATA |
| DELETE ROW | MDSYS | SDO_TOPO_METADATA_TABLE |
| DELETE ROW | MDSYS | SDO_LRS_METADATA_TABLE |
| DELETE ROW | MDSYS | SDO_THEMES_TABLE |
| DELETE ROW | MDSYS | SDO_STYLES_TABLE |
| DELETE ROW | MDSYS | SDO_CACHED_MAPS_TABLE |
| DELETE ROW | MDSYS | SDO_MAPS_TABLE |
| DELETE ROW | MDSYS | SDO_GEOM_METADATA_TABLE |
| INSERT ROW | MDSYS | SDO_GEOR_DDL__TABLE$$ |
| SELECT | SYS | AUD$ |
| SELECT | SYS | AUD$ |
| ALTER USER | N/A | TESTUSER |
| GRANT ROLE | N/A | SMTG_INQ |
| GRANT ROLE | N/A | CONNECT |
| CREATE USER | N/A | TESTUSER |
| SELECT | SYS | OBJ$ |
| SELECT | SYS | TAB$ |
| SELECT | SYS | EXTERNAL_TAB$ |
| LOGON |