15
DBMS_FGA

The DBMS_FGA package provides fine-grained security functions. Execute privilege on DBMS_FGA is needed for administering audit policies. Because the audit function can potentially capture all user environment and application context values, policy administration should be executable by privileged users only.

See Also: Oracle9i Application Developer's Guide - Fundamentals for a fuller discussion and more usage information on DBMS_FGA.

This feature is available for only cost-based optimization. The rule-based optimizer may generate unnecessary audit records since audit monitoring can occur before row filtering. For both the rule-based optimizer and the cost-based optimizer, you can refer to DBA_FGA_AUDIT_TRAIL to analyze the SQL text and corresponding bind variables that are issued.

Note: DBMS_RLS is only available with the Enterprise Edition.

This chapter discusses the following topics:

• Summary of DBMS_FGA Subprogram

Summary of DBMS_FGA Subprogram

Table 15-1 Summary of DBMS_FGA Subprograms

Subprogram	Description
"ADD_POLICY Procedure"	Creates an audit policy using the supplied predicate as the audit condition
"DROP_POLICY Procedure"	Drops an audit policy
"ENABLE_POLICY Procedure"	Enables an audit policy
"DISABLE_POLICY Procedure"	Disables an audit policy