If the following statements are submitted, a SELECT statement retrieving the AccLogRules entries for User1 returns the rows as shown:
BEGIN LOGGING ON EACH CREATE TABLE BY Jones ON USER Jones ; BEGIN LOGGING DENIALS WITH TEXT ON FIRST CREATE DATABASE BY Jones ON DATABASE Personnel ; SELECT * FROM DBC.AccLogRulesV WHERE UserName = ’Jones’ ;
Result:
| UserName | DatabaseName | TVMName | CPT | CDB | CMC | CTB | CUS | |
|---|---|---|---|---|---|---|---|---|
| Jones | Jones | All | E | ... | ||||
| Jones | Personnel | All | F- | ... |
- In the first row, the UserName “Jones”, the DatabaseName “Jones”, and the “E” in the first position of the CTB column indicate that a log entry is to be made each time a check for the CREATE TABLE privilege is performed in response to a request by Jones to create a table in his own space.
- In the second row, the UserName “Jones”, the DatabaseName “Personnel”, and the “F” in the second position of the CDB column indicate that a log entry is to be made the first time a check for a CREATE DATABASE privilege that results in a denial is performed in response to a request by Jones to create a database in the Personnel database. The “-” in the third position of the CDB column indicates that the text of the denied statement is to be saved in the log entry.