vpruthi/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/dws/dev/dws_04_0940.html
Lu, Huayi a24ca60074 DWS DEVELOPER 811 version 
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com>
Co-authored-by: Lu, Huayi <luhuayi@huawei.com>
Co-committed-by: Lu, Huayi <luhuayi@huawei.com>
2023-01-19 13:37:49 +00:00

227 lines
53 KiB
HTML
Raw Blame History

<a name="EN-US_TOPIC_0000001098654960"></a><a name="EN-US_TOPIC_0000001098654960"></a>
<h1 class="topictitle1">Operation Audit</h1>
<div id="body8662426"><div class="section" id="EN-US_TOPIC_0000001098654960__section19376165411211"><a name="EN-US_TOPIC_0000001098654960__section19376165411211"></a><a name="section19376165411211"></a><h4 class="sectiontitle">audit_operation_exec</h4><p id="EN-US_TOPIC_0000001098654960__p139141294136"><strong id="EN-US_TOPIC_0000001098654960__b19801236163111">Parameter description</strong>: Specifies whether to audit successful operations in <span id="EN-US_TOPIC_0000001098654960__text492279803">GaussDB(DWS)</span>. Set this parameter as required.</p>
<p id="EN-US_TOPIC_0000001098654960__p125518277138"><strong id="EN-US_TOPIC_0000001098654960__b16698121383218">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001098654960__p540075216138"><strong id="EN-US_TOPIC_0000001098654960__b157781115133218">Value range</strong>: a string</p>
<ul id="EN-US_TOPIC_0000001098654960__ul051634561511"><li id="EN-US_TOPIC_0000001098654960__li651674510156"><strong id="EN-US_TOPIC_0000001098654960__b1135220215324">none</strong>: indicates that no audit item is configured. If any audit item is configured, <strong id="EN-US_TOPIC_0000001098654960__b1233815468328">none</strong> becomes invalid.</li><li id="EN-US_TOPIC_0000001098654960__li3516154541518"><strong id="EN-US_TOPIC_0000001098654960__b16111115643217">all</strong>: indicates that all successful operations are audited. This value overwrites the concurrent configuration of any other audit items. Note that even if this parameter is set to <strong id="EN-US_TOPIC_0000001098654960__b390741716386">all</strong>, not all DDL operations are audited. You need to control the object level of DDL operations by referring to <a href="#EN-US_TOPIC_0000001098654960__s3d7ad19c2a3647669dfa7f39540883bc">audit_system_object</a>.</li><li id="EN-US_TOPIC_0000001098654960__li9516124512157"><strong id="EN-US_TOPIC_0000001098654960__b12472233113816">login</strong>: indicates that successful logins are audited.</li><li id="EN-US_TOPIC_0000001098654960__li75161445181512"><strong id="EN-US_TOPIC_0000001098654960__b13937165612389">logout</strong>: indicates that user logouts are audited.</li><li id="EN-US_TOPIC_0000001098654960__li851714521514"><strong id="EN-US_TOPIC_0000001098654960__b122341019163910">database_process</strong>: indicates that database startup, stop, switchover, and recovery operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li1851794511152"><strong id="EN-US_TOPIC_0000001098654960__b214163013912">user_lock</strong>: indicates that successful locking and unlocking operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li6517545151512"><strong id="EN-US_TOPIC_0000001098654960__b10934190164011">grant_revoke</strong>: indicates that successful granting and reclaiming of a user's permission are audited.</li><li id="EN-US_TOPIC_0000001098654960__li1351710453156"><strong id="EN-US_TOPIC_0000001098654960__b12620149124212">ddl</strong>: indicates that successful DDL operations are audited. DDL operations are controlled at a fine granularity based on operation objects. Therefore, <strong id="EN-US_TOPIC_0000001098654960__b85011876291">audit_system_object</strong> is used to control the objects whose DDL operations are to be audited. (The audit function takes effect as long as <strong id="EN-US_TOPIC_0000001098654960__b178551851122911">audit_system_object</strong> is configured, no matter whether <strong id="EN-US_TOPIC_0000001098654960__b63165318304">ddl</strong> is set.)</li><li id="EN-US_TOPIC_0000001098654960__li2051714571511"><strong id="EN-US_TOPIC_0000001098654960__b11522203233112">select</strong>: indicates that successful SELECT operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li851774581515"><strong id="EN-US_TOPIC_0000001098654960__b14600253133114">copy</strong>: indicates that successful COPY operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li175181645151517"><strong id="EN-US_TOPIC_0000001098654960__b14296142423216">userfunc</strong>: indicates that successful operations for user-defined functions, stored procedures, and anonymous blocks are audited.</li><li id="EN-US_TOPIC_0000001098654960__li175182045141512"><strong id="EN-US_TOPIC_0000001098654960__b12368956202010">set</strong>: indicates that successful SET operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li1551844513155"><strong id="EN-US_TOPIC_0000001098654960__b16423193917224">transaction</strong>: indicates that successful transaction operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li251810455152"><strong id="EN-US_TOPIC_0000001098654960__b3702144872218">vacuum</strong>: indicates that successful VACUUM operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li051810452152"><strong id="EN-US_TOPIC_0000001098654960__b205862055192214">analyze</strong>: indicates that successful ANALYZE operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li15183457153"><strong id="EN-US_TOPIC_0000001098654960__b731713232310">explain</strong>: indicates that successful EXPLAIN operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li12518144561517"><strong id="EN-US_TOPIC_0000001098654960__b9907171252315">specialfunc</strong>: indicates that successful calls to special functions are audited. Special functions include <strong id="EN-US_TOPIC_0000001098654960__b337075015236">pg_terminate_backend</strong> and <strong id="EN-US_TOPIC_0000001098654960__b2582353122314">pg_cancel_backend</strong>.</li><li id="EN-US_TOPIC_0000001098654960__li17518645181513"><strong id="EN-US_TOPIC_0000001098654960__b175311655172310">insert</strong>: indicates that successful INSERT operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li1551934531515"><strong id="EN-US_TOPIC_0000001098654960__b1170215922412">update</strong>: indicates that successful UPDATE operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li12519745121514"><strong id="EN-US_TOPIC_0000001098654960__b148981742417">delete</strong>: indicates that successful DELETE operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li14519184561516"><strong id="EN-US_TOPIC_0000001098654960__b19405525192418">merge</strong>: indicates that successful MERGE operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li12519134511158"><strong id="EN-US_TOPIC_0000001098654960__b18878181219265">show</strong>: indicates that successful SHOW operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li1651904519154"><strong id="EN-US_TOPIC_0000001098654960__b12862112217264">checkpoint</strong>: indicates that successful CHECKPOINT operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li55191945201520"><strong id="EN-US_TOPIC_0000001098654960__b1363193016264">barrier</strong>: indicates that successful BARRIER operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li13519194520155"><strong id="EN-US_TOPIC_0000001098654960__b2157037172612">cluster</strong>: indicates that successful CLUSTER operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li25191045111520"><strong id="EN-US_TOPIC_0000001098654960__b114208449262">comment</strong>: indicates that successful COMMENT operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li13519174511158"><strong id="EN-US_TOPIC_0000001098654960__b107161335152518">cleanconn</strong>: indicates that successful CLEANCONNECTION operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li165191345101515"><strong id="EN-US_TOPIC_0000001098654960__b826717032714">prepare</strong>: indicates that successful PREPARE, EXECUTE, and DEALLOCATE operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li1951994518158"><strong id="EN-US_TOPIC_0000001098654960__b511464810353">constraints</strong>: indicates that successful CONSTRAINTS operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li3994614162815"><strong id="EN-US_TOPIC_0000001098654960__b780845817368">cursor</strong>: indicates that successful cursor operations are audited.</li></ul>
<p id="EN-US_TOPIC_0000001098654960__p124665913149"><strong id="EN-US_TOPIC_0000001098654960__b10236143483813">Default value</strong>: <strong id="EN-US_TOPIC_0000001098654960__b1376625711484">login</strong>, <strong id="EN-US_TOPIC_0000001098654960__b25869194910">logout</strong>, <strong id="EN-US_TOPIC_0000001098654960__b1236444174913">database_process</strong>, <strong id="EN-US_TOPIC_0000001098654960__b147776164919">user_lock</strong>, <strong id="EN-US_TOPIC_0000001098654960__b1561917493">grant_revoke</strong>, <strong id="EN-US_TOPIC_0000001098654960__b7114111284913">set</strong>, <strong id="EN-US_TOPIC_0000001098654960__b1342120401149">transaction</strong>, and <strong id="EN-US_TOPIC_0000001098654960__b317410481549">cursor</strong></p>
<div class="notice" id="EN-US_TOPIC_0000001098654960__note183012316917"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><ul id="EN-US_TOPIC_0000001098654960__ul199421525151"><li id="EN-US_TOPIC_0000001098654960__li139421927158">You are advised to reserve <strong id="EN-US_TOPIC_0000001098654960__b1269918541046">transaction</strong>. Otherwise, statements in a transaction will not be audited.</li><li id="EN-US_TOPIC_0000001098654960__li1794313211155">You are advised to reserve <strong id="EN-US_TOPIC_0000001098654960__b315412914519">cursor</strong>. Otherwise, the <strong id="EN-US_TOPIC_0000001098654960__b1837445905010">SELECT</strong> statements in a cursor will not be audited. To audit the <strong id="EN-US_TOPIC_0000001098654960__b12961158245">SELECT</strong> statement within transactions and cursors, retain both transaction and cursor audit items.</li><li id="EN-US_TOPIC_0000001098654960__li79435217157">The Data Studio client automatically encapsulates <strong id="EN-US_TOPIC_0000001098654960__b1814419574518">SELECT</strong> statements using <strong id="EN-US_TOPIC_0000001098654960__b9145157155">CURSOR</strong>.</li></ul>
</div></div>
</div>
<div class="section" id="EN-US_TOPIC_0000001098654960__section16769165201912"><h4 class="sectiontitle">audit_operation_error</h4><p id="EN-US_TOPIC_0000001098654960__p18148911105213"><strong id="EN-US_TOPIC_0000001098654960__b171434116256">Parameter description</strong>: Specifies whether to audit failed operations in <span id="EN-US_TOPIC_0000001098654960__text1271514117251">GaussDB(DWS)</span>. Set this parameter as required.</p>
<p id="EN-US_TOPIC_0000001098654960__p314815119524"><strong id="EN-US_TOPIC_0000001098654960__b258512123913">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001098654960__p01482119529"><strong id="EN-US_TOPIC_0000001098654960__b171172313399">Value range</strong>: a string</p>
<ul id="EN-US_TOPIC_0000001098654960__ul14148111145212"><li id="EN-US_TOPIC_0000001098654960__li121484115527"><strong id="EN-US_TOPIC_0000001098654960__b1877824153910">none</strong>: indicates that no audit item is configured. If any audit item is configured, <strong id="EN-US_TOPIC_0000001098654960__b78771524183919">none</strong> becomes invalid.</li><li id="EN-US_TOPIC_0000001098654960__li144381578235"><strong id="EN-US_TOPIC_0000001098654960__b1747345214416">syn_success</strong>: synchronizes the <a href="#EN-US_TOPIC_0000001098654960__section19376165411211">audit_operation_exec</a> configuration. To be specific, if the audit of a successful operation is configured, the corresponding failed operation is also audited. Note that even after <strong id="EN-US_TOPIC_0000001098654960__b928411919440">syn_success</strong> is configured, you can continue to configure the audit of other failed operations. If <strong id="EN-US_TOPIC_0000001098654960__b2083415132453">audit_operation_exec</strong> is set to <strong id="EN-US_TOPIC_0000001098654960__b18976201844519">all</strong>, all failed operations are audited. If <strong id="EN-US_TOPIC_0000001098654960__b14906418459">audit_operation_exec</strong> is set to <strong id="EN-US_TOPIC_0000001098654960__b984564264513">none</strong>, <strong id="EN-US_TOPIC_0000001098654960__b621084874518">syn_success</strong> is equivalent to <strong id="EN-US_TOPIC_0000001098654960__b14569155054512">none</strong>, that is, no audit item is configured.</li><li id="EN-US_TOPIC_0000001098654960__li1415183519255"><strong id="EN-US_TOPIC_0000001098654960__b157185218465">parse</strong>: indicates that the failed command parsing is audited, including the timeout of waiting for a command execution.</li><li id="EN-US_TOPIC_0000001098654960__li95831218192014"><strong id="EN-US_TOPIC_0000001098654960__b197241441184812">login</strong>: indicates that failed logins are audited.</li><li id="EN-US_TOPIC_0000001098654960__li1470616942620"><strong id="EN-US_TOPIC_0000001098654960__b5621548114815">user_lock</strong>: indicates that failed locking and unlocking operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li933817239206"><strong id="EN-US_TOPIC_0000001098654960__b181425583484">violation</strong>: indicates that a user's access violation operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li19689410112617"><strong id="EN-US_TOPIC_0000001098654960__b6811245165512">grant_revoke</strong>: indicates that failed granting and reclaiming of a user's permission are audited.</li><li id="EN-US_TOPIC_0000001098654960__li11646185916267"><strong id="EN-US_TOPIC_0000001098654960__b9973195355613">ddl</strong>: indicates that failed DDL operations are audited. DDL operations are controlled at a fine granularity based on operation objects and configuration of <a href="#EN-US_TOPIC_0000001098654960__s3d7ad19c2a3647669dfa7f39540883bc">audit_system_object</a>. Therefore, failed DDL operations of the type specified in <a href="#EN-US_TOPIC_0000001098654960__s3d7ad19c2a3647669dfa7f39540883bc">audit_system_object</a> will be audited after <strong id="EN-US_TOPIC_0000001098654960__b033917569412">ddl</strong> is configured.</li><li id="EN-US_TOPIC_0000001098654960__li38001650192714"><strong id="EN-US_TOPIC_0000001098654960__b6741907423">select</strong>: indicates that failed SELECT operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li1780075015275"><strong id="EN-US_TOPIC_0000001098654960__b15448154684211">copy</strong>: indicates that failed COPY operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li78008502277"><strong id="EN-US_TOPIC_0000001098654960__b421155444213">userfunc</strong>: indicates that failed operations for user-defined functions, stored procedures, and anonymous blocks are audited.</li><li id="EN-US_TOPIC_0000001098654960__li58001150182712"><strong id="EN-US_TOPIC_0000001098654960__b58751621431">set</strong>: indicates that failed SET operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li580010501273"><strong id="EN-US_TOPIC_0000001098654960__b94596816438">transaction</strong>: indicates that failed transaction operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li17800185032718"><strong id="EN-US_TOPIC_0000001098654960__b734411141434">vacuum</strong>: indicates that failed VACUUM operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li1680014507274"><strong id="EN-US_TOPIC_0000001098654960__b10569131914318">analyze</strong>: indicates that failed ANALYZE operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li12800250182715"><strong id="EN-US_TOPIC_0000001098654960__b147231267431">explain</strong>: indicates that failed EXPLAIN operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li1480095017278"><strong id="EN-US_TOPIC_0000001098654960__b6916163217433">specialfunc</strong>: indicates that failed calls to special functions are audited. Special functions include <strong id="EN-US_TOPIC_0000001098654960__b1591633234316">pg_terminate_backend</strong> and <strong id="EN-US_TOPIC_0000001098654960__b18916113244316">pg_cancel_backend</strong>.</li><li id="EN-US_TOPIC_0000001098654960__li19800450102715"><strong id="EN-US_TOPIC_0000001098654960__b158918181514">insert</strong>: indicates that failed INSERT operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li10800135013275"><strong id="EN-US_TOPIC_0000001098654960__b17294182815515">update</strong>: indicates that failed UPDATE operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li118001350142714"><strong id="EN-US_TOPIC_0000001098654960__b5264174145112">delete</strong>: indicates that failed DELETE operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li48001550172719"><strong id="EN-US_TOPIC_0000001098654960__b18901247115120">merge</strong>: indicates that failed MERGE operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li13800185019272"><strong id="EN-US_TOPIC_0000001098654960__b566985445117">show</strong>: indicates that failed SHOW operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li2800175042713"><strong id="EN-US_TOPIC_0000001098654960__b166348116525">checkpoint</strong>: indicates that failed CHECKPOINT operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li180005012714"><strong id="EN-US_TOPIC_0000001098654960__b1496147155218">barrier</strong>: indicates that failed BARRIER operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li14800850192711"><strong id="EN-US_TOPIC_0000001098654960__b223651335217">cluster</strong>: indicates that failed CLUSTER operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li38001150142714"><strong id="EN-US_TOPIC_0000001098654960__b16564172111525">comment</strong>: indicates that failed COMMENT operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li88001050122710"><strong id="EN-US_TOPIC_0000001098654960__b1215215017528">cleanconn</strong>: indicates that failed CLEANCONNECTION operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li969816477282"><strong id="EN-US_TOPIC_0000001098654960__b78921358165214">prepare</strong>: indicates that failed PREPARE, EXECUTE, and DEALLOCATE operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li96984472280"><strong id="EN-US_TOPIC_0000001098654960__b198587492171">constraints</strong>: indicates that failed CONSTRAINTS operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li1869814752816"><strong id="EN-US_TOPIC_0000001098654960__b950413593174">cursor</strong>: indicates that failed cursor operations are audited.</li><li id="EN-US_TOPIC_0000001098654960__li25161149182817"><strong id="EN-US_TOPIC_0000001098654960__b11458207111812">blacklist</strong>: indicates that the blacklist execution failure is audited.</li></ul>
<p id="EN-US_TOPIC_0000001098654960__p201491611185210"><strong id="EN-US_TOPIC_0000001098654960__b1195817431481">Default value</strong>: <strong id="EN-US_TOPIC_0000001098654960__b149581843154820">login</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001098654960__section5565141017201"><h4 class="sectiontitle">audit_inner_tool</h4><p id="EN-US_TOPIC_0000001098654960__p154299124523"><strong id="EN-US_TOPIC_0000001098654960__b1331627134919">Parameter description</strong>: Specifies whether to audit the operations of the internal maintenance tool in <span id="EN-US_TOPIC_0000001098654960__text154291012185216">GaussDB(DWS)</span>.</p>
<p id="EN-US_TOPIC_0000001098654960__p14429141225212"><strong id="EN-US_TOPIC_0000001098654960__b3608184135011">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001098654960__p134291612195213"><strong id="EN-US_TOPIC_0000001098654960__b142401762509">Value range</strong>: Boolean</p>
<ul id="EN-US_TOPIC_0000001098654960__ul194291412145210"><li id="EN-US_TOPIC_0000001098654960__l9d2712b9508b40a0bd91db2bfd42d262"><strong id="EN-US_TOPIC_0000001098654960__b360711175017">on</strong>: indicates that all operations of the internal maintenance tool are audited.</li><li id="EN-US_TOPIC_0000001098654960__li103811034173"><strong id="EN-US_TOPIC_0000001098654960__b81211426135012">off</strong>: indicates that all operations of the internal maintenance tool are not audited.</li></ul>
<p id="EN-US_TOPIC_0000001098654960__p2824112392011"><strong id="EN-US_TOPIC_0000001098654960__b2051294810506">Default value</strong>: <strong id="EN-US_TOPIC_0000001098654960__b951818483500">off</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001098654960__s3d7ad19c2a3647669dfa7f39540883bc"><a name="EN-US_TOPIC_0000001098654960__s3d7ad19c2a3647669dfa7f39540883bc"></a><a name="s3d7ad19c2a3647669dfa7f39540883bc"></a><h4 class="sectiontitle">audit_system_object</h4><p id="EN-US_TOPIC_0000001098654960__a27e6c908138c4240835a7485eedbaee8"><strong id="EN-US_TOPIC_0000001098654960__b54161151165810">Parameter description</strong>: Specifies whether to audit the CREATE, DROP, and ALTER operations on the <span id="EN-US_TOPIC_0000001098654960__text1934542245">GaussDB(DWS)</span> database object. The <span id="EN-US_TOPIC_0000001098654960__text19723527">GaussDB(DWS)</span> database objects include databases, users, schemas, and tables. The operations on the database object can be audited by changing the value of this parameter.</p>
<p id="EN-US_TOPIC_0000001098654960__p2525314115220"><strong id="EN-US_TOPIC_0000001098654960__b15828125964820">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001098654960__a5f80040109cb4931acd64fb974419f49"><strong id="EN-US_TOPIC_0000001098654960__b7182378593">Value range</strong>: an integer ranging from 0 to 4194303</p>
<ul id="EN-US_TOPIC_0000001098654960__u9308c85f055a4b7cad21882b3753cb84"><li id="EN-US_TOPIC_0000001098654960__l931248fbfea24b1f842390bd8ed634df"><strong id="EN-US_TOPIC_0000001098654960__b105313122593">0</strong> indicates that the function of auditing the CREATE, DROP, and ALTER operations on the <span id="EN-US_TOPIC_0000001098654960__text165386630">GaussDB(DWS)</span> database object can be disabled.</li><li id="EN-US_TOPIC_0000001098654960__l85dc35dc199342a79307602df70d69c7">Other values indicate that the CREATE, DROP, and ALTER operations on a certain or some <span id="EN-US_TOPIC_0000001098654960__text1064762163">GaussDB(DWS)</span> database objects are audited.</li></ul>
<p id="EN-US_TOPIC_0000001098654960__aa16d9ade42154a55b28c02545068cda5"><strong id="EN-US_TOPIC_0000001098654960__b1272102416591">Value description</strong>:</p>
<p id="EN-US_TOPIC_0000001098654960__a1c2e2b2ba6ff4790889fb97569a0dfb8">The value of this parameter is calculated by 22 binary bits. The 22 binary bits represent 22 types of <span id="EN-US_TOPIC_0000001098654960__text241141894">GaussDB(DWS)</span> database objects. If the corresponding binary bit is set to <strong id="EN-US_TOPIC_0000001098654960__b14662331145918">0</strong>, the CREATE, DROP, and ALTER operations on corresponding database objects are not audited. If it is set to <strong id="EN-US_TOPIC_0000001098654960__b15667193175913">1</strong>, the CREATE, DROP, and ALTER operations are audited. For details about the audit content represented by these 22 binary bits, see <a href="#EN-US_TOPIC_0000001098654960__t1597f30ea7e346dd979eb1cc3213b343">Table 1</a>.</p>
<p id="EN-US_TOPIC_0000001098654960__a5955b737c7de4157913e77f790ec1d7e"><strong id="EN-US_TOPIC_0000001098654960__b2288539165910">Default value</strong>: <strong id="EN-US_TOPIC_0000001098654960__b132881339115915">12303</strong></p>
<div class="tablenoborder"><a name="EN-US_TOPIC_0000001098654960__t1597f30ea7e346dd979eb1cc3213b343"></a><a name="t1597f30ea7e346dd979eb1cc3213b343"></a><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000001098654960__t1597f30ea7e346dd979eb1cc3213b343" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Meaning of each value for the <strong id="EN-US_TOPIC_0000001098654960__b69591543791450">audit_system_object</strong> parameter</caption><thead align="left"><tr id="EN-US_TOPIC_0000001098654960__r3475d0ecc6624eaebe6bd5a8f1941e4f"><th align="left" class="cellrowborder" valign="top" width="18.23%" id="mcps1.3.4.9.2.4.1.1"><p id="EN-US_TOPIC_0000001098654960__a48bd947e8ce3416495b9ac5196226a62"><strong id="EN-US_TOPIC_0000001098654960__b84235270619197">Binary Bit</strong></p>
</th>
<th align="left" class="cellrowborder" valign="top" width="34.64%" id="mcps1.3.4.9.2.4.1.2"><p id="EN-US_TOPIC_0000001098654960__a55930734869f4ce28906ff6f35691cba"><strong id="EN-US_TOPIC_0000001098654960__b842352706191914">Meaning</strong></p>
</th>
<th align="left" class="cellrowborder" valign="top" width="47.13%" id="mcps1.3.4.9.2.4.1.3"><p id="EN-US_TOPIC_0000001098654960__a6f1112db05fa47deb622d551c0a3a3df"><strong id="EN-US_TOPIC_0000001098654960__b842352706191933">Value Description</strong></p>
</th>
</tr>
</thead>
<tbody><tr id="EN-US_TOPIC_0000001098654960__rba75bb46775a45bb82d6240afe7a29d9"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__aa9ef55d30b5d4330b9829575885cb5ca">Bit 0</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__ab2296a1347964039830d07c006673c3c">Whether to audit the CREATE, DROP, and ALTER operations on databases.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__u1d984c57b0e84e02ac37993fb08a7627"><li id="EN-US_TOPIC_0000001098654960__l32246c33408e4ac394ea12e4bc68d102"><strong id="EN-US_TOPIC_0000001098654960__b21280214491450">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001098654960__l6888fe155c5a410cae63c693a4581285"><strong id="EN-US_TOPIC_0000001098654960__b168068228291450">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__rfad1fdd8f8094475820202d1f219c88c"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__a05f2560f308945968420f21c125b6eeb">Bit 1</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__ac1267e7f94974b078e31ef11114eb291">Whether to audit the CREATE, DROP, and ALTER operations on schemas.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__u607278c2079d4ceaa238f170f8e55df2"><li id="EN-US_TOPIC_0000001098654960__lb9d9374528974331a40d03ce65c6b31d"><strong id="EN-US_TOPIC_0000001098654960__b95418428791450">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001098654960__l3ac67d85d2b44fceb23bd6a131c7dede"><strong id="EN-US_TOPIC_0000001098654960__b154595457691450">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__rb13d998f83b2482688f795644c40fa5c"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__a75670dd52bbf42d3b304b6cbb47f715a">Bit 2</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__acc7a59f938134440b2eb7cd4dc96b4fb">Whether to audit the CREATE, DROP, and ALTER operations on users.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__u181f2bcf4c014169b3607d138c50ebac"><li id="EN-US_TOPIC_0000001098654960__l14106c6211a0478cb0d406d1d31f28c0"><strong id="EN-US_TOPIC_0000001098654960__b4639822391450">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001098654960__le6c7edfdf0ce4775b7aba230b765a929"><strong id="EN-US_TOPIC_0000001098654960__b2243710691450">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__rdc71bfe9edbf4e6dac85c9a10ffa2558"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__a1335f061ab5546af9b50b6b7bb7532b7">Bit 3</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__a045a476701414991b6e2f87272b2d5da">Whether to audit the CREATE, DROP, ALTER, and TRUNCATE operations on tables.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__ub20155f40636414c8635410d92cc22f9"><li id="EN-US_TOPIC_0000001098654960__l22e960b8907e4c58b1cd8783d0e417d6"><strong id="EN-US_TOPIC_0000001098654960__b84235270616132">0</strong> indicates that the CREATE, DROP, ALTER, and TRUNCATE operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001098654960__l635ad00c9e014a8285e3584048c61287"><strong id="EN-US_TOPIC_0000001098654960__b842352706161328">1</strong> indicates that the CREATE, DROP, ALTER, and TRUNCATE operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__rbc3ccce0cdce4077816f28a579536fd5"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__a05f5bfde382c44f2bcd9173ee9eb8a80">Bit 4</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__a8ef19894880242c9bd68caf60baed6f9">Whether to audit the CREATE, DROP, and ALTER operations on indexes.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__u074b816efaf34a958abd345c88d7ec3e"><li id="EN-US_TOPIC_0000001098654960__lf1049d0918404b47b00de4e30039e1b2"><strong id="EN-US_TOPIC_0000001098654960__b197634368991450">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001098654960__ldb61df36f7de430eab9377c7cab9750a"><strong id="EN-US_TOPIC_0000001098654960__b75105404791450">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__r424b5286e90d4e41975c594f3f0b8483"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__ae3257264e4fe4b98bb933918214ae3e0">Bit 5</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__a969256fe3f0c44f6b194a3a52e45d754">Whether to audit the CREATE, DROP, and ALTER operations on views.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__u185fc05dbcc4434d92e575d02e34ee5e"><li id="EN-US_TOPIC_0000001098654960__l40378ce68bce48d3aea433b082f5f7a0"><strong id="EN-US_TOPIC_0000001098654960__b18437003791450">0</strong> indicates that the CREATE and DROP operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001098654960__l8aee4b1c43604d178a5c7bc607135c74"><strong id="EN-US_TOPIC_0000001098654960__b168239152591450">1</strong> indicates that the CREATE and DROP operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__r24d34fb3a5dc43b5b42835a4a4ca1127"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__a62885348be344ac2acff123515693df4">Bit 6</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__a586d0e9e34db4836803524308fdcced1">Whether to audit the CREATE, DROP, and ALTER operations on triggers.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__u12daa9ec6fca40ccbd2b525a2de85454"><li id="EN-US_TOPIC_0000001098654960__lf5757b8c40bb444e902ed7a81e5bb63c"><strong id="EN-US_TOPIC_0000001098654960__b72381790391450">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001098654960__l4ad70deabe0a4cf78c63e2dee6f9a73a"><strong id="EN-US_TOPIC_0000001098654960__b7511191391450">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__r7a1cb40a13784ca5b43daac6e2fe74f1"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__ac96684bc537d48c7a7a63b8a9fb211fa">Bit 7</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__a7b02c4af0748475790103db9d2995195">Whether to audit the CREATE, DROP, and ALTER operations on procedures/functions.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__u95c07aafa44a4a799bfece938f0efdb6"><li id="EN-US_TOPIC_0000001098654960__ld3bfdc7cdb984000a136f61cee2c50b6"><strong id="EN-US_TOPIC_0000001098654960__b159468502791450">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001098654960__ldc6f0528060c4610bb69d8bca02b4751"><strong id="EN-US_TOPIC_0000001098654960__b107659254291450">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__re86396815659456aa5286570e92a3832"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__adb0e0f903ede4c75945a06407c92632c">Bit 8</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__ac49e25fc98e5452bbceb5481487afaad">Whether to audit the CREATE, DROP, and ALTER operations on tablespaces.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__u6be66d3cfab8445bbe645a4b75de5388"><li id="EN-US_TOPIC_0000001098654960__lb18fc1d211b548959650c16ac16e09b9"><strong id="EN-US_TOPIC_0000001098654960__b52572449491450">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001098654960__l05c145e4acbb466a9a1e9c1e00cfd469"><strong id="EN-US_TOPIC_0000001098654960__b108822460891450">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__r20cd704f23de4cd594c2cc90ddebf3c0"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__a97dc6b180a9940d3ab481f22981cd00e">Bit 9</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__affabf57b4d494ea78f30bbe26eff99fe">Whether to audit the CREATE, DROP, and ALTER operations on resource pools.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__udd9ee81a8ee245cd92c1a984165f086e"><li id="EN-US_TOPIC_0000001098654960__le62a56af09e64667bf10b7d3b9ff038d"><strong id="EN-US_TOPIC_0000001098654960__b48162561491450">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001098654960__l108e49f4a2b844a0860d9e1534cde657"><strong id="EN-US_TOPIC_0000001098654960__b34184129391450">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__r807f1af5e20248d0b1ed1b51b920d095"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__ab6c9f7636aab4bb9bb6a2465151dcc8f">Bit 10</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__a31f7bceb711446e88d973e0f6001ecef">Whether to audit the CREATE, DROP, and ALTER operations on workloads.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__u449abbec4c0e4c3692ba3f34ef4a70ac"><li id="EN-US_TOPIC_0000001098654960__l16346709b01b4e928283d9528d353f30"><strong id="EN-US_TOPIC_0000001098654960__b27820475791450">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001098654960__l32291d461c884def995f8bccd810437a"><strong id="EN-US_TOPIC_0000001098654960__b52926386391450">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__r146f35d8c36b44098895d25ac331a2b7"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__abd3c790052ff43a698559d2a8985fb0f">Bit 11</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__a941340101f3842a9be602e1b3e1657ed">Whether to audit the CREATE, DROP, and ALTER operations on SERVER FOR HADOOP objects.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__udf119a537653426c8dcd32f1432755de"><li id="EN-US_TOPIC_0000001098654960__l696c740d89fe4061923b7479c7a9a358"><strong id="EN-US_TOPIC_0000001098654960__b40180812691450">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001098654960__l79593c61a08c444fae84612b5a3e6457"><strong id="EN-US_TOPIC_0000001098654960__b127403583191450">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__row18587823135616"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__p18588723165618">Bit 12</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__p8588112385617">Whether to audit the CREATE, DROP, and ALTER operations on data sources.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__ul414819581"><li id="EN-US_TOPIC_0000001098654960__li11168175813"><strong id="EN-US_TOPIC_0000001098654960__b7481118491450">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li></ul>
<ul id="EN-US_TOPIC_0000001098654960__ul979823312575"><li id="EN-US_TOPIC_0000001098654960__li280183395710"><strong id="EN-US_TOPIC_0000001098654960__b86794352091450">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__row14996171520226"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__p13997415182219">Bit 13</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__p10997171592219">Whether to audit the CREATE, DROP, and ALTER operations on Node Groups.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__ul1984414587225"><li id="EN-US_TOPIC_0000001098654960__li28452582225"><strong id="EN-US_TOPIC_0000001098654960__b184702000991450">0</strong> indicates that the CREATE and DROP operations on these objects are not audited.</li></ul>
<ul id="EN-US_TOPIC_0000001098654960__ul7846158102211"><li id="EN-US_TOPIC_0000001098654960__li4847125816222"><strong id="EN-US_TOPIC_0000001098654960__b50977588991450">1</strong> indicates that the CREATE and DROP operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__row186561926144118"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__p12658192619413">Bit 14</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__p265872613415">Whether to audit the CREATE, DROP, and ALTER operations on ROW LEVEL SECURITY objects.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__ul9841936124412"><li id="EN-US_TOPIC_0000001098654960__li2841173611445"><strong id="EN-US_TOPIC_0000001098654960__b63900275491450">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001098654960__li16915843154411"><strong id="EN-US_TOPIC_0000001098654960__b153131673091450">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__row4808247102118"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__p1680944712110">Bit 15</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__p128093473217">Whether to audit the CREATE, DROP, and ALTER operations on types.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__ul15303111582319"><li id="EN-US_TOPIC_0000001098654960__li13303131562319"><strong id="EN-US_TOPIC_0000001098654960__b172896416391">0</strong> indicates that the CREATE, DROP, and ALTER operations on types are not audited.</li><li id="EN-US_TOPIC_0000001098654960__li9303121515237"><strong id="EN-US_TOPIC_0000001098654960__b18427523153914">1</strong> indicates that the CREATE, DROP, and ALTER operations on types are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__row191581657111714"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__p777252101717">Bit 16</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__p17771252171710">Whether to audit the CREATE, DROP, and ALTER operations on text search objects (configurations and dictionaries)</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__ul7781052121710"><li id="EN-US_TOPIC_0000001098654960__li19785522172"><strong id="EN-US_TOPIC_0000001098654960__b13877813417">0</strong> indicates that the CREATE, DROP, and ALTER operations on text search objects are not audited.</li><li id="EN-US_TOPIC_0000001098654960__li207895215171"><strong id="EN-US_TOPIC_0000001098654960__b0959435174112">1</strong> indicates that the CREATE, DROP, and ALTER operations on text search objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__row9578135522119"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__p457918556215">Bit 17</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__p145791855132118">Whether to audit the CREATE, DROP, and ALTER operations on directories.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__ul87171831122315"><li id="EN-US_TOPIC_0000001098654960__li8717531192315"><strong id="EN-US_TOPIC_0000001098654960__b7263752124111">0</strong> indicates that the CREATE, DROP, and ALTER operations on directories are not audited.</li><li id="EN-US_TOPIC_0000001098654960__li1871783122311"><strong id="EN-US_TOPIC_0000001098654960__b35297514424">1</strong> indicates that the CREATE, DROP, and ALTER operations on directories are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__row053923263116"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__p654063210311">Bit 18</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__p1054053210315">Whether to audit the CREATE, DROP, and ALTER operations on workloads.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__ul2222131763217"><li id="EN-US_TOPIC_0000001098654960__li1422291783215"><strong id="EN-US_TOPIC_0000001098654960__b551107414">0</strong> indicates that the CREATE, DROP, and ALTER operations on types are not audited.</li><li id="EN-US_TOPIC_0000001098654960__li32221817123214"><strong id="EN-US_TOPIC_0000001098654960__b270674134">1</strong> indicates that the CREATE, DROP, and ALTER operations on types are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__row203721951194513"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__p18373115134518">Bit 19</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__p10373185114459">Whether to audit the CREATE, DROP, and ALTER operations on redaction policies.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__ul16867132164619"><li id="EN-US_TOPIC_0000001098654960__li108672216463"><strong id="EN-US_TOPIC_0000001098654960__b88041123">0</strong> indicates that the CREATE, DROP, and ALTER operations on redaction policies are not audited.</li><li id="EN-US_TOPIC_0000001098654960__li8867132115460"><strong id="EN-US_TOPIC_0000001098654960__b1264719341885">1</strong> indicates that the CREATE, DROP, and ALTER operations on redaction policies are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__row1931552811320"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__p331512863218">Bit 20</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__p1731592810321">Whether to audit the CREATE, DROP, and ALTER operations on sequences.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__ul1876672411367"><li id="EN-US_TOPIC_0000001098654960__li576612420367"><strong id="EN-US_TOPIC_0000001098654960__b174541281122">0</strong> indicates that the CREATE, DROP, and ALTER operations on sequences are not audited.</li><li id="EN-US_TOPIC_0000001098654960__li19766102411363"><strong id="EN-US_TOPIC_0000001098654960__b172541931417">1</strong> indicates that the CREATE, DROP, and ALTER operations on sequences are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001098654960__row594422319329"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001098654960__p99451023173215">Bit 21</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001098654960__p99451823203219">Whether to audit the CREATE, DROP, and ALTER operations on nodes.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001098654960__ul77431225133617"><li id="EN-US_TOPIC_0000001098654960__li167431325133612"><strong id="EN-US_TOPIC_0000001098654960__b4447154111510">0</strong> indicates that the CREATE, DROP, and ALTER operations on nodes are not audited.</li><li id="EN-US_TOPIC_0000001098654960__li374310254361"><strong id="EN-US_TOPIC_0000001098654960__b19371834165">1</strong> indicates that the CREATE, DROP, and ALTER operations on nodes are audited.</li></ul>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="EN-US_TOPIC_0000001098654960__s379a90633cb244f2bfcf9c2ac8e5d04a"><h4 class="sectiontitle">enableSeparationOfDuty</h4><p id="EN-US_TOPIC_0000001098654960__a9f837910e54d4d44a6c0220ca589d784"><strong id="EN-US_TOPIC_0000001098654960__en-us_topic_0059777487_ac047b77e20f04edd92af9bbc9e4bc485">Parameter description</strong>: Specifies whether the separation of permissions is enabled.</p>
<p id="EN-US_TOPIC_0000001098654960__p6572192810285"><strong id="EN-US_TOPIC_0000001098654960__b3712119493">Type</strong>: POSTMASTER</p>
<p id="EN-US_TOPIC_0000001098654960__ad1630f2e05b34780a1452ac41ea898da"><strong id="EN-US_TOPIC_0000001098654960__en-us_topic_0059777487_a82ee6ba8e01d46ddb5bca0feb3aa932e">Value range</strong>: Boolean</p>
<ul id="EN-US_TOPIC_0000001098654960__ua5f3a84c03a644a79512e49366f0df56"><li id="EN-US_TOPIC_0000001098654960__l456e9706acdf40b19132d5598b86b0d4"><strong id="EN-US_TOPIC_0000001098654960__b842352706173031">on</strong> indicates that the separation of permissions is enabled.</li><li id="EN-US_TOPIC_0000001098654960__lc8c2f043200b447bbe137088383c13e0"><strong id="EN-US_TOPIC_0000001098654960__b842352706173054">off</strong> indicates that the separation of permissions is disabled.</li></ul>
<p id="EN-US_TOPIC_0000001098654960__ac651feac904646b1954a16b756f68ed4"><strong id="EN-US_TOPIC_0000001098654960__b55233292105553">Default value</strong>: <strong id="EN-US_TOPIC_0000001098654960__b842352706172155">off</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001098654960__section786062414160"><h4 class="sectiontitle">enable_grant_option</h4><p id="EN-US_TOPIC_0000001098654960__p1985942416164"><strong id="EN-US_TOPIC_0000001098654960__b1294821410395">Parameter description</strong>: Specifies whether the <strong id="EN-US_TOPIC_0000001098654960__b148571432204013">with grant option</strong> function can be used in security mode.</p>
<p id="EN-US_TOPIC_0000001098654960__p5859624131617"><strong id="EN-US_TOPIC_0000001098654960__b32666458408">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001098654960__p1385912410167"><strong id="EN-US_TOPIC_0000001098654960__b9462114864017">Value range</strong>: Boolean</p>
<ul id="EN-US_TOPIC_0000001098654960__ul28592244161"><li id="EN-US_TOPIC_0000001098654960__li1085992471610"><strong id="EN-US_TOPIC_0000001098654960__b7183175411405">on</strong> indicates that the <strong id="EN-US_TOPIC_0000001098654960__b8807258124012">with grant option</strong> function can be used in security mode.</li><li id="EN-US_TOPIC_0000001098654960__li19859424201617"><strong id="EN-US_TOPIC_0000001098654960__b56048212416">off</strong> indicates that the <strong id="EN-US_TOPIC_0000001098654960__b1061118213415">with grant option</strong> function cannot be used in security mode.</li></ul>
<p id="EN-US_TOPIC_0000001098654960__p115361834131617"><strong id="EN-US_TOPIC_0000001098654960__b142303158413">Default value</strong>: <strong id="EN-US_TOPIC_0000001098654960__b8237181564116">off</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001098654960__section176091434269"><h4 class="sectiontitle">enable_copy_server_files</h4><p id="EN-US_TOPIC_0000001098654960__p1117122601316"><strong id="EN-US_TOPIC_0000001098654960__b35011051114617">Parameter description</strong>: Specifies whether to enable the permission to copy server files.</p>
<p id="EN-US_TOPIC_0000001098654960__p1818114719279"><strong id="EN-US_TOPIC_0000001098654960__b19882610495">Type</strong>: POSTMASTER</p>
<p id="EN-US_TOPIC_0000001098654960__p9623175071414"><strong id="EN-US_TOPIC_0000001098654960__b1236506917">Value range</strong>: Boolean</p>
<ul id="EN-US_TOPIC_0000001098654960__ul14295181181616"><li id="EN-US_TOPIC_0000001098654960__li15295121191614"><strong id="EN-US_TOPIC_0000001098654960__b1499616884714">on</strong> indicates that the permission to copy server files is enabled.</li><li id="EN-US_TOPIC_0000001098654960__li1932411317165"><strong id="EN-US_TOPIC_0000001098654960__b2794142011471">off</strong> indicates that the permission to copy server files is disabled.</li></ul>
<p id="EN-US_TOPIC_0000001098654960__p6286164415156"><strong id="EN-US_TOPIC_0000001098654960__b184841439164720">Default value</strong>: <strong id="EN-US_TOPIC_0000001098654960__b13484183916474">true</strong></p>
<div class="notice" id="EN-US_TOPIC_0000001098654960__note1880141791611"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="EN-US_TOPIC_0000001098654960__p3801117111610"><strong id="EN-US_TOPIC_0000001098654960__b01121257155015">COPY FROM</strong>/<strong id="EN-US_TOPIC_0000001098654960__b10775152175111">TO</strong> <em id="EN-US_TOPIC_0000001098654960__i779761511">file</em> requires system administrator permissions. However, if the separation of permissions is enabled, system administrator permissions are different from initial user permissions. In this case, you can use <strong id="EN-US_TOPIC_0000001098654960__b9590165215219">enable_copy_server_file</strong> to control the <strong id="EN-US_TOPIC_0000001098654960__b557519596523">COPY</strong> permission of system administrators to prevent escalation of their permissions.</p>
</div></div>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="dws_04_0937.html">Auditing</a></div>
</div>
</div>
View Git Blame Copy Permalink