Re: ddl audit trigger

  • From: "Yechiel Adar" <adar76@xxxxxxxxxxxx>
  • To: "Oracle-L Freelists" <oracle-l@xxxxxxxxxxxxx>
  • Date: Thu, 13 Jan 2005 22:37:36 +0200

I think that the problem is in having the: administer database trigger
privilege that user system have.
This privilege lets you ignore error in trigger and go on working. However
the error in the trigger are written to the alert log.
You can check if there was a message when you delete this trigger.
Your problem is that the dba role have this privilege so you could not block
him from deleteing this role.

Yechiel Adar
Mehish Computer Services
----- Original Message -----
From: "Leonard, George" <GLeonard@xxxxxxxxxxxxx>
To: "Oracle-L Freelists" <oracle-l@xxxxxxxxxxxxx>
Sent: Thursday, January 13, 2005 2:06 PM
Subject: ddl audit trigger


> Hi all
>
> Written a database trigger ddltrigger that fires on ddl on database.
> Owned by system
>
> Prompt Creating Trigger ddltrigger
> CREATE OR REPLACE TRIGGER DDLTrigger
> BEFORE DROP OR DDL ON DATABASE
>
> DECLARE
> BEGIN
> =09ddlaudit.audit;
> END;
>
>
> This then calls a package that does a small amount of work (also owned
> by system), this then calls the meaty packaged owned by another user
> (not system) that does the actual logging.
>
> Problem I am having is this trigger does not fire when it is dropped
> itself.
>
> Any ideas
>
>
>
> George
> =20________________________________________________
> George Leonard
> Oracle Database Administrator
> New Dawn Technologies @ Wesbank
> E-mail:gleonard@xxxxxxxxxxxxx
> =20
> You Have The Obligation to Inform One Honestly of the risk, And As a
> Person
> You Are Committed to Educate Yourself to the Total Risk In Any Activity!
> Once Informed & Totally Aware of the Risk,
> Every Fool Has the Right to Kill or Injure Themselves as They See Fit!
> =20
>
> _________________________________________________________________________=
> __________________________
>
>
> The views expressed in this email are, unless otherwise stated, those of =
> the author and not those
> of the FirstRand Banking Group an Authorised Financial Service Provider o=
> r its management.
> The information in this e-mail is confidential and is intended solely for=
> =20the addressee.
> Access to this e-mail by anyone else is unauthorised.
> If you are not the intended recipient, any disclosure, copying, distribut=
> ion or any action taken or=20
> omitted in reliance on this, is prohibited and may be unlawful.
> Whilst all reasonable steps are taken to ensure the accuracy and integrit=
> y of information and data=20
> transmitted electronically and to preserve the confidentiality thereof, n=
> o liability or=20
> responsibility whatsoever is accepted if information or data is, for what=
> ever reason, corrupted=20
> or does not reach its intended destination.
>
> =20                              ________________________________
> --
> //www.freelists.org/webpage/oracle-l

--
//www.freelists.org/webpage/oracle-l

Other related posts: