16.10 - Database Level Logging - Teradata Database

Teradata Database Security Administration

prodname
Teradata Database
vrm_release
16.10
created_date
June 2017
category
Administration
Security
featnum
B035-1100-161K

When a BEGIN LOGGING statement specifies logging at the database level, actions requested against all objects in that database generate log entries.

To illustrate this, assume that DatabaseA contains several tables, and that PUBLIC has the INSERT privilege only on Table1.

A current access log rule is based on:

    BEGIN LOGGING ON FIRST INSERT ON DatabaseA ;

Subsequently, if users other than the owner submit INSERT statements against tables in DatabaseA, the log entries show:

  • “Granted” for the first insert into Table1
  • “Denied” for the first attempt to insert into any other table in DatabaseA