fine-grained auditing

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

cesar.castillo@exel.com - 30 Aug 2007 22:00 GMT

I'm trying to add a new FGA policy, but I get message "DBMS_FGA must
be declared".
Is there a previous step before the creation of the policy?
I'm using 10g on Windows XP.

Reply to this Message

fitzjarrell@cox.net - 31 Aug 2007 14:08 GMT

On Aug 30, 4:00 pm, cesar.casti...@exel.com wrote:

> I'm trying to add a new FGA policy, but I get message "DBMS_FGA must
> be declared".
> Is there a previous step before the creation of the policy?
> I'm using 10g on Windows XP.

http://oratips-ddf.blogspot.com/2006/05/audit-this.html

There is also a link to an example in the documentation in the blog
entry which should also list the required privileges. You will need
to have execute on the dbms_fga package for any of this to work.

David Fitzjarrell

Reply to this Message

Oraculo01 - 31 Aug 2007 16:55 GMT

> There is also a link to an example in the documentation in the blog
> entry which should also list the required privileges. You will need
> to have execute on the dbms_fga package for any of this to work.
>
> David Fitzjarrell

That's what I was afraid of. I'll ask our DBA.
Thank you!

Reply to this Message

fitzjarrell@cox.net - 31 Aug 2007 19:18 GMT

> > There is also a link to an example in the documentation in the blog
> > entry which should also list the required privileges. You will need
[quoted text clipped - 4 lines]
> That's what I was afraid of. I'll ask our DBA.
> Thank you!

Normally when the package is created the necessary permissions are
granted to the EXECUTE_CATALOG_ROLE. You may, then, have two
problems:

1) the DBMS_FGA package has not been created.
2) the user account creating the FGA policy isn't granted the
EXECUTE_CATALOG_ROLE

I agree the smart decision here is to discuss this with your DBA and
arrive at a mutually agreeable solution.

David Fitzjarrell

Reply to this Message