使用者建立了一個TRIGGER:
create or replace trigger ddl_deny
before create or alter or drop on database
declare
begin
insert into ddl_logs values(ora_dict_obj_owner,ora_dict_obj_name,sysdate);
exception
when no_data_found then
null;
end;
目的大概就是記錄下所有的DDL操作，但TRIGGER建立有錯誤，發現:
select owner, object_name, object_type, status from dba_objects where object_name = '<TRIGGER_NAME>';
12:42:38 system@ORA250>select owner, object_name, object_type, status from dba_o
bjects where object_name='DDL_DENY';
OWNER OBJECT_NAME OBJECT_TYPE STATUS
------------------------------------ --------------
SYSTEM DDL_DENY TRIGGER INVALID
發現使用者權限沒有問題。
2、接著設定診斷事件alter session set events='4098 trace name errorstack level 3';，查看trace檔案的內容如下：
14:28:32 system@ORA815>select ksppinm from x$ksppi where substr(ksppinm,1,1)='_'
and ksppinm like '%tri%' order by ksppinm;
KSPPINM
-------------------------------------------------------------------------------
_cleanup_rollback_entries
_distributed_lock_timeout
_distributed_recovery_connection_hold_time
_number_cached_attributes
_system_trig_enabled
