I need to know if somebody can read and save to oneself packages from my database, Oracle specifically. Can I prevent it?
I mostly worry about tools like “Export schema” of Toad. How can I know somebody didn’t something like exporting my database structure?
Oracle can log many things like who accesses the system, who executes certain packages and procedures, who accesses data etc. The facility is called Auditing or Fine Grained Auditing. Just have a look at the documentation for the AUDIT command.
Having said that, it needs to be turned on explicitly. So if it hasn’t been turned on yet, then you won’t find any audit information for the past.
For the future, it’s probably easier to restrict the access rights of your users to prevent them from doing it than to identify all the functions and places that would require auditing.