Users who are not zone users but who have the ZONE OVERRIDE privilege and also have EXECUTE privilege on DBQLAccessMacro can enable and disable query logging on all database objects in a zone.
Users with ZONE OVERRIDE privileges who also have SELECT privileges on V views have system-wide access.