|
Parameter?
|
Return Value
|
|
ACTION
|
Identifies the position in the module (application name) and is set through the
|
|
DBMS_APPLICATION_INFO package or OCI.
|
|
AUDITED_CURSORID
|
Returns the cursor ID of the SQL that triggered the audit. This parameter is not
|
|
valid in a fine-grained auditing environment. If you specify it in such an
|
|
environment, Oracle Database always returns NULL.
|
|
AUTHENTICATED_IDENTITY
|
Returns the identity used in authentication. In the list that follows, the type of user
|
|
is followed by the value returned:
|
|
■ Kerberos-authenticated enterprise user: kerberos principal name
|
|
■ Kerberos-authenticated external user : kerberos principal name; same as the schema name
|
|
■ SSL-authenticated enterprise user: the DN in the user’s PKI certificate
|
|
■ SSL-authenticated external user: the DN in the user's PKI certificate
|
|
■ Password-authenticated enterprise user: nickname; same as the login name
|
|
■ Password-authenticated database user: the database username; same as the schema name
|
|
■ OS-authenticated external user: the external operating system user name
|
|
■ Radius/DCE-authenticated external user: the schema name
|
|
■ Proxy with DN : Oracle Internet Directory DN of the client
|
|
■ Proxy with certificate: certificate DN of the client
|
|
■ Proxy with username: database user name if client is a local database user;
|
|
nickname if client is an enterprise user.
|
|
■ SYSDBA/SYSOPER using Password File: login name
|
|
■ SYSDBA/SYSOPER using OS authentication: operating system user name
|
|
AUTHENTICATION_DATA
|
Data being used to authenticate the login user. For X.503 certificate authenticated
|
|
sessions, this field returns the context of the certificate in HEX2 format.
|
|
Note: You can change the return value of the AUTHENTICATION_DATA attribute
|
|
using the length parameter of the syntax. Values of up to 4000 are accepted. This is
|
|
the only attribute of USERENV for which Oracle Database implements such a change.
|
|
AUTHENTICATION_METHOD
|
Returns the method of authentication. In the list that follows, the type of user is
|
|
followed by the method returned:
|
|
■ Password-authenticated enterprise user, local database user, or
|
|
SYSDBA/SYSOPER using Password File; proxy with username using
|
|
password: PASSWORD
|
|
■ Kerberos-authenticated enterprise or external user: KERBEROS
|
|
■ SSL-authenticated enterprise or external user: SSL
|
|
■ Radius-authenticated external user: RADIUS
|
|
■ OS-authenticated external user or SYSDBA/SYSOPER: OS
|
|
■ DCE-authenticated external user: DCE
|
|
■ Proxy with certificate, DN, or username without using password: NONE
|
|
You can use IDENTIFICATION_TYPE to distinguish between external and
|
|
enterprise users when the authentication method is Password, Kerberos, or SSL.
|
|
BG_JOB_ID
|
Job ID of the current session if it was established by an Oracle Database background
|
|
process. Null if the session was not established by a background process.
|
|
CLIENT_IDENTIFIER
|
Returns an identifier that is set by the application through the DBMS_
|
|
SESSION.SET_IDENTIFIER procedure, the OCI attribute OCI_ATTR_CLIENT_
|
|
IDENTIFIER, or the Java class
|
|
Oracle.jdbc.OracleConnection.setClientIdentifier. This attribute is
|
|
used by various database components to identify lightweight application users who
|
|
authenticate as the same database user.
|
|
CLIENT_INFO
|
Returns up to 64 bytes of user session information that can be stored by an
|
|
application using the DBMS_APPLICATION_INFO package.
|
|
CURRENT_BIND
|
The bind variables for fine-grained auditing.
|
|
CURRENT_SCHEMA
|
Name of the default schema being used in the current schema. This value can be
|
|
changed during the session with an ALTER SESSION SET CURRENT_SCHEMA
|
|
statement.
|
|
CURRENT_SCHEMAID
|
Identifier of the default schema being used in the current session.
|
CURRENT_SQL
CURRENT_SQLn
|
CURRENT_SQL returns the first 4K bytes of the current SQL that triggered the
|
|
fine-grained auditing event. The CURRENT_SQLn attributes return subsequent
|
|
4K-byte increments, where n can be an integer from 1 to 7, inclusive. CURRENT_
|
|
SQL1 returns bytes 4K to 8K; CURRENT_SQL2 returns bytes 8K to 12K, and so forth.
|
|
You can specify these attributes only inside the event handler for the fine-grained
|
|
auditing feature.
|
|
CURRENT_SQL_LENGTH
|
The length of the current SQL statement that triggers fine-grained audit or row-level
|
|
security (RLS) policy functions or event handlers. Valid only inside the function or
|
|
event handler.
|
|
DB_DOMAIN
|
Domain of the database as specified in the DB_DOMAIN initialization parameter.
|
|
DB_NAME
|
Name of the database as specified in the DB_NAME initialization parameter.
|
|
DB_UNIQUE_NAME
|
Name of the database as specified in the DB_UNIQUE_NAME initialization parameter.
|
|
ENTRYID
|
The current audit entry number. The audit entryid sequence is shared between
|
|
fine-grained audit records and regular audit records. You cannot use this attribute in
|
|
distributed SQL statements. The correct auditing entry identifier can be seen only
|
|
through an audit handler for standard or fine-grained audit.
|
|
ENTERPRISE_IDENTITY
|
Returns the user's enterprise-wide identity:
|
|
■ For enterprise users: the Oracle Internet Directory DN.
|
|
■ For external users: the external identity (Kerberos principal name, Radius and
|
|
DCE schema names, OS user name, Certificate DN).
|
|
■ For local users and SYSDBA/SYSOPER logins: NULL.
|
|
The value of the attribute differs by proxy method:
|
|
■ For a proxy with DN: the Oracle Internet Directory DN of the client
|
|
■ For a proxy with certificate: the certificate DN of the client for external users;
|
|
the Oracle Internet Directory DN for global users
|
|
■ For a proxy with username: the Oracle Internet Directory DN if the client is an
|
|
enterprise users; NULL if the client is a local database user.
|
|
FG_JOB_ID
|
Job ID of the current session if it was established by a client foreground process.
|
|
Null if the session was not established by a foreground process.
|
|
GLOBAL_CONTEXT_MEMORY
|
Returns the number being used in the System Global Area by the globally accessed
|
|
context.
|
|
GLOBAL_UID
|
Returns the global user ID from Oracle Internet Directory for Enterprise User
|
|
Security (EUS) logins; returns null for all other logins.
|
|
HOST
|
Name of the host machine from which the client has connected.
|
|
IDENTIFICATION_TYPE
|
Returns the way the user's schema was created in the database. Specifically, it
|
|
reflects the IDENTIFIED clause in the CREATE/ALTER USER syntax. In the list that
|
|
follows, the syntax used during schema creation is followed by the identification
|
|
type returned:
|
|
■ IDENTIFIED BY password: LOCAL
|
|
■ IDENTIFIED EXTERNALLY: EXTERNAL
|
|
■ IDENTIFIED GLOBALLY: GLOBAL SHARED
|
|
■ IDENTIFIED GLOBALLY AS DN: GLOBAL PRIVATE
|
|
INSTANCE
|
The instance identification number of the current instance.
|
|
INSTANCE_NAME
|
The name of the instance.
|
|
IP_ADDRESS
|
IP address of the machine from which the client is connected.
|
|
ISDBA
|
Returns TRUE if the user has been authenticated as having DBA privileges either
|
|
through the operating system or through a password file.
|
|
LANG
|
The ISO abbreviation for the language name, a shorter form than the existing
|
|
'LANGUAGE' parameter.
|
|
LANGUAGE
|
The language and territory currently used by your session, along with the database
|
|
character set, in this form:
|
|
language_territory.characterset
|
|
MODULE
|
The application name (module) set through the DBMS_APPLICATION_INFO
|
|
package or OCI.
|
|
NETWORK_PROTOCOL
|
Network protocol being used for communication, as specified in the
|
|
'PROTOCOL=protocol' portion of the connect string.
|
|
NLS_CALENDAR
|
The current calendar of the current session.
|
|
NLS_CURRENCY
|
The currency of the current session.
|
|
NLS_DATE_FORMAT
|
The date format for the session.
|
|
NLS_DATE_LANGUAGE
|
The language used for expressing dates.
|
|
NLS_SORT
|
BINARY or the linguistic sort basis.
|
|
NLS_TERRITORY
|
The territory of the current session.
|
|
OS_USER
|
Operating system user name of the client process that initiated the database session.
|
|
POLICY_INVOKER
|
The invoker of row-level security (RLS) policy functions.
|
|
PROXY_ENTERPRISE_IDENTITY
|
Returns the Oracle Internet Directory DN when the proxy user is an enterprise user.
|
|
PROXY_GLOBAL_UID
|
Returns the global user ID from Oracle Internet Directory for Enterprise User
|
|
Security (EUS) proxy users; returns NULL for all other proxy users.
|
|
PROXY_USER
|
Name of the database user who opened the current session on behalf of SESSION_USER.
|
|
PROXY_USERID
|
Identifier of the database user who opened the current session on behalf of SESSION_USER.
|
|
SERVER_HOST
|
The host name of the machine on which the instance is running.
|
|
SERVICE_NAME
|
The name of the service to which a given session is connected.
|
|
SESSION_USER
|
For enterprises users, returns the schema. For other users, returns the database user
|
|
name by which the current user is authenticated. This value remains the same
|
|
throughout the duration of the session.
|
|
SESSION_USERID
|
Identifier of the database user name by which the current user is authenticated.
|
|
SESSIONID
|
The auditing session identifier. You cannot use this attribute in distributed SQL statements.
|
|
SID
|
The session number (different from the session ID).
|
|
STATEMENTID
|
The auditing statement identifier. STATEMENTID represents the number of SQL
|
|
statements audited in a given session. You cannot use this attribute in distributed
|
|
SQL statements. The correct auditing statement identifier can be seen only through
|
|
an audit handler for standard or fine-grained audit.
|
|
TERMINAL
|
The operating system identifier for the client of the current session. In distributed
|
|
SQL statements, this attribute returns the identifier for your local session. In a
|
|
distributed environment, this is supported only for remote SELECT statements, not
|
|
for remote INSERT, UPDATE, or DELETE operations. (The return length of this
|
|
parameter may vary by operating system.)
|
|
AUTHENTICATION_TYPE
|
This parameter returned a value indicating how the user was authenticated. The same
|
|
information is now available from the new AUTHENTICATION_METHOD parameter
|
|
combined with IDENTIFICATION_TYPE.
|
|
CURRENT_USER
|
Use the SESSION_USER parameter instead.
|
|
CURRENT_USERID
|
Use the SESSION_USERID parameter instead.
|
|
EXTERNAL_NAME
|
This parameter returned the external name of the user. More complete information
|
|
can now be obtained from the AUTHENTICATED_IDENTITY and ENTERPRISE_IDENTITY parameter.
|