This example logs denials of any attempt to archive table in the securedb on which user TomSmith does not have OVERRIDE DUMP privileges.
BEGIN LOGGING DENIALS ON EACH OVERRIDE DUMP FOR CONSTRAINT classification_level BY TomSmith ON DATABASE securedb;