When a BEGIN LOGGING statement specifies logging at the database level, actions requested against all objects in that database generate log entries.
To illustrate this, assume that DatabaseA contains several tables, and that PUBLIC has the INSERT privilege only on Table1.
A current access log rule is based on:
BEGIN LOGGING ON FIRST INSERT ON DatabaseA ;
Subsequently, if users other than the owner submit INSERT statements against tables in DatabaseA, the log entries show:
- “Granted” for the first insert into Table1
- “Denied” for the first attempt to insert into any other table in DatabaseA