About Query Logging Privileges in a Zoned System
Zone-level query logging allows zone DBAs to monitor user queries in their zones. Zone members can enable query logging only on objects within their zones. Query logging privileges are as follows:
|
User Type |
BEGIN/REPLACE/SHOW/END Query Logging Allowed |
|
|
System-level. These users can see and act on zone and non-zone objects. These users cannot end zone-level logging created by zone users. |
|
Zone user with the EXECUTE privilege on DBC.DBQLAccessMacro |
Zone level. This user can see and act only on objects in his zone. If this user issues BEGIN QUERY LOGGING ON ALL, only objects in the zone of this user are logged. |
|
Non-zone user with the EXECUTE privilege on DBC.DBQLAccessMacro |
Non-zone-level. This user can see and act only on non-zone objects. |
For More Information
For more information on secure zones, see Security Administration.