the audit of a specific user for their session

Is it possible to toggle the audit for a user in a way similar to the activation/deactivation of a role?

What I'm trying to do is - to enable auditing for a user when they connect to an application (where his roles via an application based role - (identified by a package role) allows the application) and - when the user disconnects have audit automatically "disable."

I don't know if this is possible. Idea/suggestions are greatly appreciated.

Thank you!

If I understand your question, you can use a fine grain for this audit. AFAIK, you can under certain conditions to audit using regular buildings. You can do something like...

begin
  dbms_fga.add_policy(object_schema   => 'YOUR_USER',
                      object_name     => 'YOUR_TABLE',
                      policy_name     => 'YOUR_TABLE_AUDIT',
                      audit_condition => 'sys_context(''userenv'',''os_user'') = ''howards''',
                      audit_column    => 'YOUR_COLUMN');
end;
/

This will create an audit record in dba_fga_audit_trail when the howards os_user selects the column of the specified table. If the same database user running the select when you are connected to os_user 'raymond', the selection will not be audited.

Some sys_context parameters are easily spoofed, but the idea should hold true regardless of how you would rate the session.

Tags: Database

Similar Questions

  • I can't access the files under a specific user name, no password

    original title: access files

    Received the infamous "blue screen" error  Installed new hard drive and Windows XP Pro.  Installed old drive "blue screen" in a "pregnant" so I could access the files.  Only problem is that I can't access the files under a specific user name, no password.  All of the suggestions.

    In a situation like yours, you need to "Take Ownership" files that you can access on your old disk:

    "How appropriate a file or a folder in Windows XP"
      <>http://support.Microsoft.com/kb/308421 >

    HTH,
    JW

  • Assign the PMP license to specific users without TMS

    Hello guys,.

    IM development environment of videoconferencing on my client with this specification:

    -Worm CUCM 11.x

    -Telepresence conductor XC4.0 (only 1)

    -vTelepresence Server ver 4.2 (only 1)

    My problem is im using PMP licenses, no screen. So I really confuse how to assign the license PMP to specific users.

    I already insert the driver's license, like the image below:

    the multiparty license on driver State said: I already have 25 license PMP but assign 0. and he said: if I did a conference call, he used license SMP, so the lack of SMP license error always come. So I need 1 license PMP connection to my user / ext to remove the error warning.

    I can do without TMS?

    If can, please help me with this.

    Thank you all.

    Best regards

    Christophe.

    The recommendation is to use use AD to import users in CUCM and TMSPE to make sure that all the same users are added.  However, you may manually create users in CUCM and TMSPE as long as the details between the two systems are the same, including the address of the video as that will identify the user as long as the host of the CMR.

  • I tried dnlding flash player @ least 30 times... Most of the time he worked, but only for 1 session... I even disabled my AV, how to keep in my system or get HTML 5

    I tried dnlding flash player @ least 30 times... Most of the time he worked, but for 1 session... I've even disabled my AV, how to keep in my system, or get HTML 5?

    Hello

    How are you trying to download Flashplayer?
    I suggest that you follow the methods provided and check if it helps to solve the problem.
    Method 1:
    See the link, then run the Fixit. This will help remove all traces that might have left a previous installation of Flash Player.
    Solve problems with programs that cannot be installed or uninstalled
    http://support.Microsoft.com/mats/Program_Install_and_Uninstall
    Method 2:
    Step 1:

    Perform a clean boot and install Flashplayer. Clean boot to disable non-Microsoft services which can otherwise cause conflicts during installation. Check out the link and follow the steps.
    How to configure Windows XP to start in a "clean boot" State
    http://support.Microsoft.com/kb/310353
     
    Important: after you have completed troubleshooting. Make sure that you follow the steps in the article to put the computer from starting in Normal mode.
    Step 2:
    See the link, download the application on your desktop computer and then run the installation.
    Alternatively, you can contact Adobe support on this issue. Check out the link.
    Flash Player Help / installation issues. Flash Player | Windows

     
     
  • How to know the name (package, procedures or functions) for current sessions

    Hi all

    I am DBA and I want to find a way to get the object name regardless (packages, procedures or functions) for the current statement running in the current session.

    To specify when I open the browser session of Toad, I can see the active sessions and the current statement for each session, but without the name of the object.


    Is it possible to know this point.

    Thanks in advance

    Select *.

    from dba_objects

    When object_id in (select nvl (t.PLSQL_ENTRY_OBJECT_ID-1)

    v $ session t

    where sid = 452)

    -----

    Ramin Hashimzade

  • Allow users to open a file on the network but not copy it for their machine. Possible?

    People! I have a scenario. Please let know us if its possible. I put a PDF on a folder and share it. I want to give users a direct link (network path) to this file so that users can open the pdf file. But I don't want them that copy on their local machine. Is this possible? If Yes please let me know for XP SP3 and Server 2003. Thank you!

    Hi rkka.

    Thanks for visiting the site of the community of Microsoft Windows XP. The question you have posted is related to the Server 2003 and would be better suited to the Technet community. Please visit the link below to find a community that will provide the support you want.

    http://social.technet.Microsoft.com/forums/en-us/categories/
    Shawn - Support Engineer - MCP, MCDST
    Microsoft Answers Support Engineer
    Visit our Microsoft answers feedback Forum and let us know what you think

  • lock all users in a maintenance of the database open to specific users

    Hello

    I need to write a script which locks all users except some mentioned users.  There is a problem most of my users db name is full. like 100, 101 102, you have to put "" to search for.

    Can someone help me with this?

    Kind regards

    Of course, just concatenate the ' ' in the same way:

    Select "change user" "|" "" USER NAME | "" account lock;' from dba_users where username NOT IN ('EXCEPTION_USER1', 'EXCEPTION_USERN'); "

  • Run the Workflow as a specific user

    Hello world

    My English is not great, so I'm sorry for the typos, I'll do.

    I have a little problem with the management of rights in vCenter Orchestrator. I just created a new environment Orchestrator. I created the workflow a bit like for example to stop or restart virtual machines. My problem is that I don't want all users to be able to manage each VMs. To realize that I need configure the Orchestrator to use a single session per user. Then I set the permissions on the server vCenter Server. Which works very well.

    Know that I created another workflow that clone of an existing virtual machine. But as the Orchestrator uses a single session per user, vCO users do not have sufficient rights to clone a virtual machine. This is because I would like to run the cloning-workflow to run as another user. I already discovered "credentials of change" - Action, but know the users do not have sufficient rights to change credentials. I won't give them administrator rights, at least until they are able to change the workflow by using the Orchestrator Client.

    So I tried to restrict access using Client Orchestrator. But this also seems to be impossible without denying web access. Now I'm stuck. Is there any solution for this?

    Thank you very much.

    OK, I just did the test on my side so I understand better what is happening.

    It seems that the admin should be just defined the workflow approval and each parent to the root of the change. It's admin roles give the right to create / modify / delete.

    I think it's the same situation that you are experiencing.

    A work around would be to use the firewall block the vCO for different hosts data port that the server of vCO and maybe your admin workstation.

    Maybe another would be to program an original workflow workflow (to test, it can work as system).

  • How to use the adapter to assign the task to a specific user

    Hi all

    I am currently configuring a task in an approval process, so that it is assigned to a person determined by the organisation of the applicant. I wrote a small method that search the user name for the name of an organization in a file (we might change this later, but it's ok for now) a return, has created a map using this method, but it looks as if I can't map the map returns the value to the user field that the transfer will go.
    I would like someone to help me...

    assignRequestToUser

    public void assignRequestToUser (long plRequestKey,
    long plUserKey)
    throws Thor.API.Exceptions.tcAdministratorAlreadyAssignedException,
    Thor.API.Exceptions.tcAPIException,
    Thor.API.Exceptions.tcInvalidUserException,
    Thor.API.Exceptions.tcRequestNotFoundException,
    Thor.API.Exceptions.tcUserNotFoundException,
    tcAPIException

    Assigns an administrator to apply. This is possible if the request does not have a current Director. The user being affected must be member of a groups assigned to this request administrative privileges.

    Parameters:
    plRequestKey - the key for the request.
    plUserKey - the key of the user to assign administrator
    Throws:
    tcAdministratorAlreadyAssignedException
    tcAPIException
    tcInvalidUserException
    tcRequestNotFoundException
    tcUserNotFoundException

  • How to see the types (SIT) special specific information for a particular responsibility

    Hi all

    I have 2 SIT, DEPT for example and other EMP.

    by default the two SIT appear when I click on Special Information request in self-service employee liability.

    Here, I want to create a custom RESP and I want to display a SIT say Dept.

    Can anyone suggest it please how to display only SIT in a single responsibility, instead of showing that all SITTING?


    without using the customization. Is there a way we can pass special SIT as a parameter when the function was created?

    Thank you.

    Kind regards

    Guru

    Link above is for the forms.

    Self-service page, this can be achieved by using personalization.

    Lets say, you have two defined SITs with segments

    (1) SIT_ONE with FILED_1, Champ_2, FIELD_3

    (2) SIT_TWO with FIELD_4, FIELD_5, FIELD_6.

    Two of them are going to be displayed in Employee Self Service (ESS), using customization, it is possible to display a single SIT or certain fields in a SIT.

    In the page customize the sit, go to the SIT has filed. There is a field called Segment list.

    Here are the possible combinations that you can use.

    1. SIT_ONE | FILED_1 | Champ_2: It shows only two fields in SIT_ONE
    2. SIT_ONE | FILED_1 | CHAMP_2 | SIT_TWO | FIELD_6: It shows Champ_1, Champ_2 of SIT_ONE and FIELD_6 of SIT_TWO. Remember, both teams are separated by two pipes (|)

    Your case, these customizations must be made at the level of responsibility.

    Kind regards

    Stephanie.

  • Parameters of BT for the transfer of all the BT settings to another user

    Hello
    I have a computer here in my conference room with several users to work on it (MS Active Directory).
    For the Conference, I have installed a 'PolyCom VoiceStation 500' as a device of helmet on the Administrators account. There the unit works fine, but when I log in as a different user, windows seems to forget all the settings made before.
    How can I get windows to transfer all the BT settings to another user (for example "all users" - profile)?
    I'm running on Windows XP Pro SP2 on an Optiplex G620.

    Thank you very much
    Ingo

    Hi Ingo

    Sorry, but I don't see in your composition of validation between BT and Toshiba. Do you use a Toshiba designed BT Stack?

  • Manage the NICs (network Card) by user (restrictions)

    Hello

    I'm reaching out to you guys since I am unable to find a way to do what I'm doing...

    I'm trying to set up a Windows 7 SP1 workstation on which there will be two users who have different network security:

    User 1 - No. access network or specify a network adapter that is not connected to a network

    2 - the user full network access

    Both users have their session open at the same time and network programs/services running in user 2's account at the same time that user 1's done things in his session that has no network...

    Here is what I checked:

    -Check if it was possible to have a firewall user rights (have not found a way) it seems that they apply by computer...

    -J' tried to adjust different parameters, once again, there is no me helped

    -J' tried to give specific user rights to disable the network adapter in the registry (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces). Unfortunately, it does not work. I can't delete a user rights, because I'm unable to take possession of the NIC :(  (Someone did it?)

    -Virtualization of user 1, user 2 session is not an option.

    You guys have an idea?

    Thank you! :)

    This issue is beyond the scope of this site (for consumers) and to be sure, you get the best (and fastest) reply, we have to ask either on Technet (for IT Pro) or MSDN (for developers)
    *
  • Keep details of the folder is changed in default for any file type.

    I would like to have the details for the defined folder to 'Name', 'Update', 'Type' and 'size '.
    But every time I save a file in this folder, the details in this case happen to the default value for the type of file, I just saved.
    Ex: I save an mp3 in a folder and the details get passed to 'Name', 'Artists', 'Album', ' # ', 'Gender' and 'Notation '.
    Or, if I save an image, the details mode 'Name', 'Date', "Tags", "Size" and "rating".

    It's really annoying. I want the details of the case to stay on what I put them.

    Here's how to change the default template for a folder: http://www.vistax64.com/tutorials/70819-windows-explorer-folder-view-settings.html.  Default behavior is to select the model based on the first type of file placed in the folder (you must choose something).  Vista sets the folder type template according to what are the types of files in the window and the settings display window Explorer. This will show how to reset the display settings for the Windows File Explorer, disable Automatic folder Type Discovery (which is I think what you want)and increase the folder display the cache to make Vista do not forget the display settings, the folder type template, the size or the position of a specific window for when it was still closed to the location of specific path.

    It does not work with the Sub record under, Open with, open in a new tab (Internet Explorer), etc... dialog windows of type through the good File menu bar item. These don't seem to be able to have their size or their position to recall. For the latter, you can use the free program AutoSizer to resize them.

    Here is another article on how to modify the columns in Windows Explorer and sort in Vista: http://www.vistax64.com/tutorials/108665-column-customize.html.  This will show you how Add, Remove, move, change the widthand change the sort order of the columns in Windows Explorer in the way that you want.

    Here is another article on how to change the display of the default folders in Vista (but she argues, it is not a perfect solution and can revert to the previous behavior is not as good as the two prior links provided: http://news.cnet.com/8301-13880_3-10019957-68.html.)

    I hope this helps in your situation.

    Good luck!

    Lorien - a - MCSE/MCSA/network + / A +.

  • Hide column to a specific user in 9i

    Hi all

    Oracle 10g implements column masking with the SPV, but same functionality is not available in 9i. Does anyone have any suggestions on how I can implement the masking of the column (from a specific user) in Oracle 9i?

    Rgds

    Does anyone have any suggestions on how I can implement the masking of the column (from a specific user) in Oracle 9i?

    Unfortunately, your only option is to create a view for that user that selects only the columns that you want them to see.

    Cheers, APC

    blog: http://radiofreetooting.blogspot.com

  • The assign/distribution of server processes dedicated to session SYSDBA on shared server

    Hello world

    My Oracle 11 g R2 server works on Win 8 in shared server mode. I put SHARED_SERVER = 3 and SHARED_SERVER_SESSIONS = 10 in the initialization parameter file. I don't know how these two works settings. Is anyway to set up the process server dedicated server shared for DBA session? In short, I want that on a shared server, all end users / Developer sessions use or shared server processes where the shared server process will be shared between them according to setting SHARED_SERVER_SESSIONS and also that you want to create dedicated server processes share server for session of DBA only because I want only uses session SYSDBA privileged dedicated process server rather shared server process.

    One of your post will help!

    Best regards

    Tushar Lapani

    Configuration of the database for shared server connections ALLOWS sharing of connections to the server, but does not REQUIRE it.

    It is the client process to apply the type of connection.

    Connection with a dedicated server is the default value.  If you want a shared server you have to specifically ask for it:

    In the tnsnames.ora:

    ORCL =

    (DESCRIPTION =

    (ADDRESS = (PROTOCOL = TCP)(HOST = vblnxsrv01.localdomain) (PORT = 1521))

    (CONNECT_DATA =

    (SERVER = SHARED)

    (SERVICE_NAME = orcl)

    )

    )

    In your defense, it is not very easy to find in the documentation if you don't already know what you are looking for.  Even in knowing exactly what I was looking for this answer, it took me a bit to find it, and then, it was obvious that it would be easy to see and do not understand the interest in your question.

    See http://docs.oracle.com/cd/E11882_01/network.112/e41945/concepts.htm#NETAG1036

    And your installation is not YET certified on your operating system.

Maybe you are looking for