For our compliance scanning for Oracle databases we have to cover the question who can/has used the DROP or CREATE statements. So we are using the CIDs 9169 and 9170, but returned is just a list with CREATE and DROP permissions. No link to a user or a profile is listed. Nor any statistics. So we are wondering about these two CIDs. How are they meant to be used/evaluated?
Thanks and cheers,