Use Cases of Oracle audit function

Audit Function
The database is in the mount status.
SQL> alter system set audit_file_dest = '/u01/gdrz/' scope = spfile;
(Set the Audit Directory)
System altered.
SQL> alter system set audit_trail = db, extended scope = spfile;
System altered.
[Oracle @ bw ~] $ Sqlplus/as sysdba
SQL * Plus: Release 10.2.0.1.0-Production on Sat Apr 23 17:01:42 2011
Copyright (c) 1982,200 5, Oracle. All rights reserved.
Connected:
Oracle Database 10 gEnterprise Edition Release 10.2.0.1.0-Production
With the Partitioning, OLAP and Data Mining options
SQL> select username from dba_users; (delete user drop user xx cascade ;)
USERNAME
------------------------------
OUTLN
SYS
SYSTEM
BBWW
DBSNMP
TSMSYS
DIP
7 rows selected.
SQL> create user bb identified by oracle; (oracle refers to password)
User created.
SQL> create user ww identified by oracle;
User created.
SQL> grant connect, resource to bb; (grant permissions)
Grant succeeded.
SQL> grant connect, resource to ww;
Grant succeeded.
SQL> conn bb/oracle
Connected.
SQL> select * from tab;
No rows selected
SQL> create table ctc (name varchar2 (10 ));
Table created.
SQL> select * from ctc;
No rows selected
SQL> insert into ctc values ('hangzhou ');
1 row created.
SQL> commit; (submit data)
Commit complete.
SQL> select * from ctc;
NAME
----------
Hangzhou
SQL> show user;
USER is "BB"
SQL> grant select on ctc to ww;
Grant succeeded.
SQL> conn ww/oracle
Connected.
SQL> select * from bb. ctc;
NAME
----------
Hangzhou
SQL> conn/as sysdba
Connected.
SQL> show parameter audit
NAME TYPE VALUE
-----------------------------------------------------------------------------
Audit_file_dest string/u01/bwaudit
Audit_sys_operations boolean FALSE
Audit_syslog_level string
Audit_trail string DB, EXTENDED
SQL> audit select on bb. ctc;
Audit succeeded.
SQL> conn ww/oracle
Connected.
SQL> select * from bb. ctc;
NAME
----------
Hangzhou
SQL> conn/as sysdba
Connected.
SQL> select username, SQL _text from dba_audit_trail;
USERNAME
------------------------------
SQL _TEXT
--------------------------------------------------------------------------------
WW
Select * from bb. ctc (audit results)