This content has been marked as final. Show 3 replies
Query DBA_STMT_AUDIT_OPTS to see if auditing is enabled.
You could query DBA_AUDIT_STATEMENT to see if the ALTER SYSTEM grant has been granted :
select user_name, audit_option, success from dba_stmt_audit_opts order by 2 /
However, if the GRANT ALTER SYSTEM was executed by SYS, then it would NOT have been captured unless AUDIT_SYS_OPERATIONS is set to TRUE -- in which case you have to check AUDIT_FILE_DEST.
select os_username, username, userhost, sys_privilege, grantee, to_char(timestamp,'DD-MON-RR HH24:MI') from dba_audit_statement where sys_privilege = 'ALTER SYSTEM' /
Hemant K Chitale