特权需要用户更改审计政体？

发布于 2025-02-13 21:04:12 字数 453 浏览 0 评论 0原文

我已经由User_a创建了一个审核策略“ select_action_on_tables”。

create audit policy select_action_on_tables
actions select on user_a.test_table1;

我将“ AUDIT_ADMIN”授予USER_B。

grant audit_admin to user_b;

但是USER_B无法使用ORA-01031更改“ select_action_on_tables”：特权错误不足。

alter audit policy select_action_on_tables add actions select on user_a.test_table2;

我是否错过了用户_B更改审计政治的特权？谢谢。

原文

I have created a audit policy "select_action_on_tables" by user_a.

create audit policy select_action_on_tables
actions select on user_a.test_table1;

And i grant "audit_admin" to user_b.

grant audit_admin to user_b;

but user_b unable to alter the "select_action_on_tables" with ORA-01031: insufficient privileges error.

alter audit policy select_action_on_tables add actions select on user_a.test_table2;

Do i miss any privileges need for user_b to alter an audit polity? Thank you.

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

厌味 2025-02-20 21:04:12

audit_admin是一个角色，默认情况下不会激活角色。您要么需要更改用户以使角色默认为活动，要么更改会话以激活角色：

alter user user_b default role audit_admin [, role1, role2, ...];

alter user user_b default role all;

alter session set role audit_admin;

请参见文档：

https://docs.oracle.com/en/database/oracle/oracle/oracle-database/19/sqlrf/alter-user.html#guid-9fcd038d-8193-8193-8193-4241-4241-85cd-85cd-cd-2f4723b23b2723b27d44d4444444444 </
4 < https://docs.oracle.com/en/database/oracle/oracle/oracle-database/19/sqlrf/set-role.html#guid-863f9b6f9b6f-82b4-49-49-49-8e3a-3ba33333ae79cab

也首次分配时，在现有会话中无法激活角色。指定的用户必须启动新的会话才能继承新的特权。

AUDIT_ADMIN is a role, and roles are not activated by default. You either need to alter the user to make the role active by default, or alter the session to activate the role:

alter user user_b default role audit_admin [, role1, role2, ...];

alter user user_b default role all;

alter session set role audit_admin;

See documentation here:

Also note that a role cannot be activated in existing sessions when first assigned. The designated user must start a new session in order to inherit the new privileges.

回复收藏 0 原文

~没有更多了~