This example logs denials when a user attempts to access any table that has the classification_category constraint, if the user does not have the OVERRIDE SELECT CONSTRAINT privilege.
BEGIN LOGGING DENIALS ON EACH OVERRIDE SELECT FOR CONSTRAINT classification_category;