My Oracle Support Banner

19c Privileges EXEMPT DDL REDACTION POLICY & EXEMPT DML REDACTION POLICY does not get audited (Doc ID 2719557.1)

Last updated on OCTOBER 14, 2020

Applies to:

Oracle Database - Enterprise Edition - Version 18.0.0.0 and later
Information in this document applies to any platform.

Symptoms

We are configuring Audit options in oracle databases.
When we set audit for "REDACTION" operations, AUDIT statements work fine:

SYS@PPITR> Audit EXEMPT REDACTION POLICY;

Audit succeeded.

SYS@PPITR> Audit EXEMPT DDL REDACTION POLICY;

Audit succeeded.

SYS@PPITR> Audit EXEMPT DML REDACTION POLICY;

Audit succeeded.

But select from audit options view returns only one option set:

SYS@PPITR> select * from DBA_STMT_AUDIT_OPTS where audit_option like '%REDACTION%' order by 1;

USER_NAME PROXY_NAME AUDIT_OPTION
-------------------------------------------------------------------------------------------------------------------------------- -------------------------------------------------------------------------------------------------------------------------------- ----------------------------------------
SUCCESS FAILURE
---------- ----------
  EXEMPT REDACTION POLICY
BY ACCESS BY ACCESS

In all other DBs (12c version) we see all 3 options set.

We need to be able to control audit options in all db, please check why the SELECT doesn't return all set options

Changes

 Starting from 18c db release EXEMPT DDL REDACTION POLICY & EXEMPT DML REDACTION POLICY are removed. Hence when auditing is enabled they do not get audited

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.