vpruthi/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/dws/dev/dws_04_0940.html
Lu, Huayi ef0ada5a59 DWS DEV 20240716 version 
Reviewed-by: Pruthi, Vineet <vineet.pruthi@t-systems.com>
Co-authored-by: Lu, Huayi <luhuayi@huawei.com>
Co-committed-by: Lu, Huayi <luhuayi@huawei.com>
2024-11-02 09:07:47 +00:00

221 lines
53 KiB
HTML
Raw Blame History

<a name="EN-US_TOPIC_0000001460882324"></a><a name="EN-US_TOPIC_0000001460882324"></a>
<h1 class="topictitle1">Operation Audit</h1>
<div id="body8662426"><div class="section" id="EN-US_TOPIC_0000001460882324__section19376165411211"><a name="EN-US_TOPIC_0000001460882324__section19376165411211"></a><a name="section19376165411211"></a><h4 class="sectiontitle">audit_operation_exec</h4><p id="EN-US_TOPIC_0000001460882324__p139141294136"><strong id="EN-US_TOPIC_0000001460882324__b19801236163111">Parameter description</strong>: Specifies whether to audit successful operations in <span id="EN-US_TOPIC_0000001460882324__text492279803">GaussDB(DWS)</span>. Set this parameter as required.</p>
<p id="EN-US_TOPIC_0000001460882324__p125518277138"><strong id="EN-US_TOPIC_0000001460882324__b16698121383218">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001460882324__p540075216138"><strong id="EN-US_TOPIC_0000001460882324__b157781115133218">Value range</strong>: a string</p>
<ul id="EN-US_TOPIC_0000001460882324__ul051634561511"><li id="EN-US_TOPIC_0000001460882324__li651674510156"><strong id="EN-US_TOPIC_0000001460882324__b1135220215324">none</strong>: indicates that no audit item is configured. If any audit item is configured, <strong id="EN-US_TOPIC_0000001460882324__b1233815468328">none</strong> becomes invalid.</li><li id="EN-US_TOPIC_0000001460882324__li3516154541518"><strong id="EN-US_TOPIC_0000001460882324__b16111115643217">all</strong>: indicates that all successful operations are audited. This value overwrites the concurrent configuration of any other audit items. Note that even if this parameter is set to <strong id="EN-US_TOPIC_0000001460882324__b390741716386">all</strong>, not all DDL operations are audited. You need to control the object level of DDL operations by referring to <a href="#EN-US_TOPIC_0000001460882324__s3d7ad19c2a3647669dfa7f39540883bc">audit_system_object</a>.</li><li id="EN-US_TOPIC_0000001460882324__li9516124512157"><strong id="EN-US_TOPIC_0000001460882324__b12472233113816">login</strong>: indicates that successful logins are audited.</li><li id="EN-US_TOPIC_0000001460882324__li75161445181512"><strong id="EN-US_TOPIC_0000001460882324__b13937165612389">logout</strong>: indicates that user logouts are audited.</li><li id="EN-US_TOPIC_0000001460882324__li851714521514"><strong id="EN-US_TOPIC_0000001460882324__b122341019163910">database_process</strong>: indicates that database startup, stop, switchover, and recovery operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li1851794511152"><strong id="EN-US_TOPIC_0000001460882324__b214163013912">user_lock</strong>: indicates that successful locking and unlocking operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li6517545151512"><strong id="EN-US_TOPIC_0000001460882324__b10934190164011">grant_revoke</strong>: indicates that successful granting and reclaiming of a user's permission are audited.</li><li id="EN-US_TOPIC_0000001460882324__li1351710453156"><strong id="EN-US_TOPIC_0000001460882324__b12620149124212">ddl</strong>: indicates that successful DDL operations are audited. DDL operations are controlled at a fine granularity based on operation objects. Therefore, <strong id="EN-US_TOPIC_0000001460882324__b85011876291">audit_system_object</strong> is used to control the objects whose DDL operations are to be audited. (The audit function takes effect as long as <strong id="EN-US_TOPIC_0000001460882324__b178551851122911">audit_system_object</strong> is configured, no matter whether <strong id="EN-US_TOPIC_0000001460882324__b63165318304">ddl</strong> is set.)</li><li id="EN-US_TOPIC_0000001460882324__li2051714571511"><strong id="EN-US_TOPIC_0000001460882324__b11522203233112">select</strong>: indicates that successful SELECT operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li851774581515"><strong id="EN-US_TOPIC_0000001460882324__b14600253133114">copy</strong>: indicates that successful COPY operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li175181645151517"><strong id="EN-US_TOPIC_0000001460882324__b14296142423216">userfunc</strong>: indicates that successful operations for user-defined functions, stored procedures, and anonymous blocks are audited.</li><li id="EN-US_TOPIC_0000001460882324__li175182045141512"><strong id="EN-US_TOPIC_0000001460882324__b12368956202010">set</strong>: indicates that successful SET operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li1551844513155"><strong id="EN-US_TOPIC_0000001460882324__b16423193917224">transaction</strong>: indicates that successful transaction operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li251810455152"><strong id="EN-US_TOPIC_0000001460882324__b3702144872218">vacuum</strong>: indicates that successful VACUUM operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li051810452152"><strong id="EN-US_TOPIC_0000001460882324__b205862055192214">analyze</strong>: indicates that successful ANALYZE operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li15183457153"><strong id="EN-US_TOPIC_0000001460882324__b731713232310">explain</strong>: indicates that successful EXPLAIN operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li12518144561517"><strong id="EN-US_TOPIC_0000001460882324__b9907171252315">specialfunc</strong>: indicates that successful calls to special functions are audited. Special functions include <strong id="EN-US_TOPIC_0000001460882324__b337075015236">pg_terminate_backend</strong> and <strong id="EN-US_TOPIC_0000001460882324__b2582353122314">pg_cancel_backend</strong>.</li><li id="EN-US_TOPIC_0000001460882324__li17518645181513"><strong id="EN-US_TOPIC_0000001460882324__b175311655172310">insert</strong>: indicates that successful INSERT operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li1551934531515"><strong id="EN-US_TOPIC_0000001460882324__b1170215922412">update</strong>: indicates that successful UPDATE operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li12519745121514"><strong id="EN-US_TOPIC_0000001460882324__b148981742417">delete</strong>: indicates that successful DELETE operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li14519184561516"><strong id="EN-US_TOPIC_0000001460882324__b19405525192418">merge</strong>: indicates that successful MERGE operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li12519134511158"><strong id="EN-US_TOPIC_0000001460882324__b18878181219265">show</strong>: indicates that successful SHOW operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li1651904519154"><strong id="EN-US_TOPIC_0000001460882324__b12862112217264">checkpoint</strong>: indicates that successful CHECKPOINT operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li55191945201520"><strong id="EN-US_TOPIC_0000001460882324__b1363193016264">barrier</strong>: indicates that successful BARRIER operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li13519194520155"><strong id="EN-US_TOPIC_0000001460882324__b2157037172612">cluster</strong>: indicates that successful CLUSTER operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li25191045111520"><strong id="EN-US_TOPIC_0000001460882324__b114208449262">comment</strong>: indicates that successful COMMENT operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li13519174511158"><strong id="EN-US_TOPIC_0000001460882324__b107161335152518">cleanconn</strong>: indicates that successful CLEANCONNECTION operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li165191345101515"><strong id="EN-US_TOPIC_0000001460882324__b826717032714">prepare</strong>: indicates that successful PREPARE, EXECUTE, and DEALLOCATE operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li1951994518158"><strong id="EN-US_TOPIC_0000001460882324__b511464810353">constraints</strong>: indicates that successful CONSTRAINTS operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li3994614162815"><strong id="EN-US_TOPIC_0000001460882324__b780845817368">cursor</strong>: indicates that successful cursor operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li39621938103414"><strong id="EN-US_TOPIC_0000001460882324__b191241325218">discard</strong> indicates that the successful executions related to global temporary tables in the current session are audited.</li></ul>
<p id="EN-US_TOPIC_0000001460882324__p124665913149"><strong id="EN-US_TOPIC_0000001460882324__b122321054195413">Default value</strong>: <strong id="EN-US_TOPIC_0000001460882324__b1923395420545">login</strong>, <strong id="EN-US_TOPIC_0000001460882324__b17233354175416">logout</strong>, <strong id="EN-US_TOPIC_0000001460882324__b12337547545">database_process</strong>, <strong id="EN-US_TOPIC_0000001460882324__b9233155455413">user_lock</strong>, <strong id="EN-US_TOPIC_0000001460882324__b162331254165417">grant_revoke</strong>, <strong id="EN-US_TOPIC_0000001460882324__b1923345410547">set</strong>, <strong id="EN-US_TOPIC_0000001460882324__b6233125485414">transaction</strong>, and <strong id="EN-US_TOPIC_0000001460882324__b2023345417543">cursor</strong></p>
<div class="notice" id="EN-US_TOPIC_0000001460882324__note183012316917"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><ul id="EN-US_TOPIC_0000001460882324__ul199421525151"><li id="EN-US_TOPIC_0000001460882324__li139421927158">You are advised to reserve <strong id="EN-US_TOPIC_0000001460882324__b1269918541046">transaction</strong>. Otherwise, statements in a transaction will not be audited.</li><li id="EN-US_TOPIC_0000001460882324__li1794313211155">You are advised to reserve <strong id="EN-US_TOPIC_0000001460882324__b315412914519">cursor</strong>. Otherwise, the <strong id="EN-US_TOPIC_0000001460882324__b1837445905010">SELECT</strong> statements in a cursor will not be audited.</li><li id="EN-US_TOPIC_0000001460882324__li79435217157">The Data Studio client automatically encapsulates <strong id="EN-US_TOPIC_0000001460882324__b1814419574518">SELECT</strong> statements using <strong id="EN-US_TOPIC_0000001460882324__b9145157155">CURSOR</strong>.</li><li id="EN-US_TOPIC_0000001460882324__li169405085518">If a user-defined function or stored procedure contains a <strong id="EN-US_TOPIC_0000001460882324__b2146938833103943">FETCH</strong> statement, the <strong id="EN-US_TOPIC_0000001460882324__b1517921173103943">common_text</strong> field records the corresponding CURSOR content when the <strong id="EN-US_TOPIC_0000001460882324__b54308191733">FETCH</strong> statement is audited.</li></ul>
</div></div>
</div>
<div class="section" id="EN-US_TOPIC_0000001460882324__section16769165201912"><h4 class="sectiontitle">audit_operation_error</h4><p id="EN-US_TOPIC_0000001460882324__p18148911105213"><strong id="EN-US_TOPIC_0000001460882324__b171434116256">Parameter description</strong>: Specifies whether to audit failed operations in <span id="EN-US_TOPIC_0000001460882324__text1271514117251">GaussDB(DWS)</span>. Set this parameter as required.</p>
<p id="EN-US_TOPIC_0000001460882324__p314815119524"><strong id="EN-US_TOPIC_0000001460882324__b258512123913">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001460882324__p01482119529"><strong id="EN-US_TOPIC_0000001460882324__b171172313399">Value range</strong>: a string</p>
<ul id="EN-US_TOPIC_0000001460882324__ul14148111145212"><li id="EN-US_TOPIC_0000001460882324__li121484115527"><strong id="EN-US_TOPIC_0000001460882324__b1877824153910">none</strong>: indicates that no audit item is configured. If any audit item is configured, <strong id="EN-US_TOPIC_0000001460882324__b78771524183919">none</strong> becomes invalid.</li><li id="EN-US_TOPIC_0000001460882324__li144381578235"><strong id="EN-US_TOPIC_0000001460882324__b1747345214416">syn_success</strong>: synchronizes the <a href="#EN-US_TOPIC_0000001460882324__section19376165411211">audit_operation_exec</a> configuration. To be specific, if the audit of a successful operation is configured, the corresponding failed operation is also audited. Note that even after <strong id="EN-US_TOPIC_0000001460882324__b928411919440">syn_success</strong> is configured, you can continue to configure the audit of other failed operations. If <strong id="EN-US_TOPIC_0000001460882324__b2083415132453">audit_operation_exec</strong> is set to <strong id="EN-US_TOPIC_0000001460882324__b18976201844519">all</strong>, all failed operations are audited. If <strong id="EN-US_TOPIC_0000001460882324__b14906418459">audit_operation_exec</strong> is set to <strong id="EN-US_TOPIC_0000001460882324__b984564264513">none</strong>, <strong id="EN-US_TOPIC_0000001460882324__b621084874518">syn_success</strong> is equivalent to <strong id="EN-US_TOPIC_0000001460882324__b14569155054512">none</strong>, that is, no audit item is configured.</li><li id="EN-US_TOPIC_0000001460882324__li1415183519255"><strong id="EN-US_TOPIC_0000001460882324__b157185218465">parse</strong>: indicates that the failed command parsing is audited, including the timeout of waiting for a command execution.</li><li id="EN-US_TOPIC_0000001460882324__li95831218192014"><strong id="EN-US_TOPIC_0000001460882324__b197241441184812">login</strong>: indicates that failed logins are audited.</li><li id="EN-US_TOPIC_0000001460882324__li1470616942620"><strong id="EN-US_TOPIC_0000001460882324__b5621548114815">user_lock</strong>: indicates that failed locking and unlocking operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li933817239206"><strong id="EN-US_TOPIC_0000001460882324__b181425583484">violation</strong>: indicates that a user's access violation operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li19689410112617"><strong id="EN-US_TOPIC_0000001460882324__b6811245165512">grant_revoke</strong>: indicates that failed granting and reclaiming of a user's permission are audited.</li><li id="EN-US_TOPIC_0000001460882324__li11646185916267"><strong id="EN-US_TOPIC_0000001460882324__b9973195355613">ddl</strong>: indicates that failed DDL operations are audited. DDL operations are controlled at a fine granularity based on operation objects and configuration of <a href="#EN-US_TOPIC_0000001460882324__s3d7ad19c2a3647669dfa7f39540883bc">audit_system_object</a>. Therefore, failed DDL operations of the type specified in <a href="#EN-US_TOPIC_0000001460882324__s3d7ad19c2a3647669dfa7f39540883bc">audit_system_object</a> will be audited after <strong id="EN-US_TOPIC_0000001460882324__b033917569412">ddl</strong> is configured.</li><li id="EN-US_TOPIC_0000001460882324__li38001650192714"><strong id="EN-US_TOPIC_0000001460882324__b6741907423">select</strong>: indicates that failed SELECT operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li1780075015275"><strong id="EN-US_TOPIC_0000001460882324__b15448154684211">copy</strong>: indicates that failed COPY operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li78008502277"><strong id="EN-US_TOPIC_0000001460882324__b421155444213">userfunc</strong>: indicates that failed operations for user-defined functions, stored procedures, and anonymous blocks are audited.</li><li id="EN-US_TOPIC_0000001460882324__li58001150182712"><strong id="EN-US_TOPIC_0000001460882324__b58751621431">set</strong>: indicates that failed SET operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li580010501273"><strong id="EN-US_TOPIC_0000001460882324__b94596816438">transaction</strong>: indicates that failed transaction operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li17800185032718"><strong id="EN-US_TOPIC_0000001460882324__b734411141434">vacuum</strong>: indicates that failed VACUUM operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li1680014507274"><strong id="EN-US_TOPIC_0000001460882324__b10569131914318">analyze</strong>: indicates that failed ANALYZE operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li12800250182715"><strong id="EN-US_TOPIC_0000001460882324__b147231267431">explain</strong>: indicates that failed EXPLAIN operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li1480095017278"><strong id="EN-US_TOPIC_0000001460882324__b6916163217433">specialfunc</strong>: indicates that failed calls to special functions are audited. Special functions include <strong id="EN-US_TOPIC_0000001460882324__b1591633234316">pg_terminate_backend</strong> and <strong id="EN-US_TOPIC_0000001460882324__b18916113244316">pg_cancel_backend</strong>.</li><li id="EN-US_TOPIC_0000001460882324__li19800450102715"><strong id="EN-US_TOPIC_0000001460882324__b158918181514">insert</strong>: indicates that failed INSERT operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li10800135013275"><strong id="EN-US_TOPIC_0000001460882324__b17294182815515">update</strong>: indicates that failed UPDATE operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li118001350142714"><strong id="EN-US_TOPIC_0000001460882324__b5264174145112">delete</strong>: indicates that failed DELETE operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li48001550172719"><strong id="EN-US_TOPIC_0000001460882324__b18901247115120">merge</strong>: indicates that failed MERGE operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li13800185019272"><strong id="EN-US_TOPIC_0000001460882324__b566985445117">show</strong>: indicates that failed SHOW operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li2800175042713"><strong id="EN-US_TOPIC_0000001460882324__b166348116525">checkpoint</strong>: indicates that failed CHECKPOINT operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li180005012714"><strong id="EN-US_TOPIC_0000001460882324__b1496147155218">barrier</strong>: indicates that failed BARRIER operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li14800850192711"><strong id="EN-US_TOPIC_0000001460882324__b223651335217">cluster</strong>: indicates that failed CLUSTER operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li38001150142714"><strong id="EN-US_TOPIC_0000001460882324__b16564172111525">comment</strong>: indicates that failed COMMENT operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li88001050122710"><strong id="EN-US_TOPIC_0000001460882324__b1215215017528">cleanconn</strong>: indicates that failed CLEANCONNECTION operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li969816477282"><strong id="EN-US_TOPIC_0000001460882324__b78921358165214">prepare</strong>: indicates that failed PREPARE, EXECUTE, and DEALLOCATE operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li96984472280"><strong id="EN-US_TOPIC_0000001460882324__b198587492171">constraints</strong>: indicates that failed CONSTRAINTS operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li1869814752816"><strong id="EN-US_TOPIC_0000001460882324__b950413593174">cursor</strong>: indicates that failed cursor operations are audited.</li><li id="EN-US_TOPIC_0000001460882324__li25161149182817"><strong id="EN-US_TOPIC_0000001460882324__b11458207111812">blacklist</strong>: indicates that the blacklist execution failure is audited.</li><li id="EN-US_TOPIC_0000001460882324__li147681354203714"><strong id="EN-US_TOPIC_0000001460882324__b57052157542">discard</strong> indicates that the execution failures related to global temporary tables in the current session are audited.</li></ul>
<p id="EN-US_TOPIC_0000001460882324__p201491611185210"><strong id="EN-US_TOPIC_0000001460882324__b1195817431481">Default value</strong>: <strong id="EN-US_TOPIC_0000001460882324__b149581843154820">login</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001460882324__section5565141017201"><h4 class="sectiontitle">audit_inner_tool</h4><p id="EN-US_TOPIC_0000001460882324__p154299124523"><strong id="EN-US_TOPIC_0000001460882324__b1331627134919">Parameter description</strong>: Specifies whether to audit the operations of the internal maintenance tool in <span id="EN-US_TOPIC_0000001460882324__text154291012185216">GaussDB(DWS)</span>.</p>
<p id="EN-US_TOPIC_0000001460882324__p14429141225212"><strong id="EN-US_TOPIC_0000001460882324__b3608184135011">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001460882324__p134291612195213"><strong id="EN-US_TOPIC_0000001460882324__b142401762509">Value range</strong>: Boolean</p>
<ul id="EN-US_TOPIC_0000001460882324__ul194291412145210"><li id="EN-US_TOPIC_0000001460882324__l9d2712b9508b40a0bd91db2bfd42d262"><strong id="EN-US_TOPIC_0000001460882324__b360711175017">on</strong>: indicates that all operations of the internal maintenance tool are audited.</li><li id="EN-US_TOPIC_0000001460882324__li103811034173"><strong id="EN-US_TOPIC_0000001460882324__b81211426135012">off</strong>: indicates that all operations of the internal maintenance tool are not audited.</li></ul>
<p id="EN-US_TOPIC_0000001460882324__p2824112392011"><strong id="EN-US_TOPIC_0000001460882324__b2051294810506">Default value</strong>: <strong id="EN-US_TOPIC_0000001460882324__b951818483500">off</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001460882324__s3d7ad19c2a3647669dfa7f39540883bc"><a name="EN-US_TOPIC_0000001460882324__s3d7ad19c2a3647669dfa7f39540883bc"></a><a name="s3d7ad19c2a3647669dfa7f39540883bc"></a><h4 class="sectiontitle">audit_system_object</h4><p id="EN-US_TOPIC_0000001460882324__a27e6c908138c4240835a7485eedbaee8"><strong id="EN-US_TOPIC_0000001460882324__b54161151165810">Parameter description</strong>: Specifies whether to audit the CREATE, DROP, and ALTER operations on the <span id="EN-US_TOPIC_0000001460882324__text1934542245">GaussDB(DWS)</span> database object. The <span id="EN-US_TOPIC_0000001460882324__text19723527">GaussDB(DWS)</span> database objects include databases, users, schemas, and tables. The operations on the database object can be audited by changing the value of this parameter.</p>
<p id="EN-US_TOPIC_0000001460882324__p2525314115220"><strong id="EN-US_TOPIC_0000001460882324__b15828125964820">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001460882324__a5f80040109cb4931acd64fb974419f49"><strong id="EN-US_TOPIC_0000001460882324__b7182378593">Value range</strong>: an integer ranging from 0 to 4194303</p>
<ul id="EN-US_TOPIC_0000001460882324__u9308c85f055a4b7cad21882b3753cb84"><li id="EN-US_TOPIC_0000001460882324__l931248fbfea24b1f842390bd8ed634df"><strong id="EN-US_TOPIC_0000001460882324__b105313122593">0</strong> indicates that the function of auditing the CREATE, DROP, and ALTER operations on the <span id="EN-US_TOPIC_0000001460882324__text165386630">GaussDB(DWS)</span> database object can be disabled.</li><li id="EN-US_TOPIC_0000001460882324__l85dc35dc199342a79307602df70d69c7">Other values indicate that the CREATE, DROP, and ALTER operations on a certain or some <span id="EN-US_TOPIC_0000001460882324__text1064762163">GaussDB(DWS)</span> database objects are audited.</li></ul>
<p id="EN-US_TOPIC_0000001460882324__aa16d9ade42154a55b28c02545068cda5"><strong id="EN-US_TOPIC_0000001460882324__b1272102416591">Value description</strong>:</p>
<p id="EN-US_TOPIC_0000001460882324__a1c2e2b2ba6ff4790889fb97569a0dfb8">The value of this parameter is calculated by 22 binary bits. The 22 binary bits represent 22 types of <span id="EN-US_TOPIC_0000001460882324__text241141894">GaussDB(DWS)</span> database objects. If the corresponding binary bit is set to <strong id="EN-US_TOPIC_0000001460882324__b14662331145918">0</strong>, the CREATE, DROP, and ALTER operations on corresponding database objects are not audited. If it is set to <strong id="EN-US_TOPIC_0000001460882324__b15667193175913">1</strong>, the CREATE, DROP, and ALTER operations are audited. For details about the audit content represented by these 22 binary bits, see <a href="#EN-US_TOPIC_0000001460882324__t1597f30ea7e346dd979eb1cc3213b343">Table 1</a>.</p>
<p id="EN-US_TOPIC_0000001460882324__a5955b737c7de4157913e77f790ec1d7e"><strong id="EN-US_TOPIC_0000001460882324__b2288539165910">Default value</strong>: <strong id="EN-US_TOPIC_0000001460882324__b132881339115915">12303</strong></p>
<div class="tablenoborder"><a name="EN-US_TOPIC_0000001460882324__t1597f30ea7e346dd979eb1cc3213b343"></a><a name="t1597f30ea7e346dd979eb1cc3213b343"></a><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000001460882324__t1597f30ea7e346dd979eb1cc3213b343" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Meaning of each value for the <strong id="EN-US_TOPIC_0000001460882324__b101923834042419">audit_system_object</strong> parameter</caption><thead align="left"><tr id="EN-US_TOPIC_0000001460882324__r3475d0ecc6624eaebe6bd5a8f1941e4f"><th align="left" class="cellrowborder" valign="top" width="18.23%" id="mcps1.3.4.9.2.4.1.1"><p id="EN-US_TOPIC_0000001460882324__a48bd947e8ce3416495b9ac5196226a62"><strong id="EN-US_TOPIC_0000001460882324__b84235270619197">Binary Bit</strong></p>
</th>
<th align="left" class="cellrowborder" valign="top" width="34.64%" id="mcps1.3.4.9.2.4.1.2"><p id="EN-US_TOPIC_0000001460882324__a55930734869f4ce28906ff6f35691cba"><strong id="EN-US_TOPIC_0000001460882324__b842352706191914">Meaning</strong></p>
</th>
<th align="left" class="cellrowborder" valign="top" width="47.13%" id="mcps1.3.4.9.2.4.1.3"><p id="EN-US_TOPIC_0000001460882324__a6f1112db05fa47deb622d551c0a3a3df"><strong id="EN-US_TOPIC_0000001460882324__b842352706191933">Value Description</strong></p>
</th>
</tr>
</thead>
<tbody><tr id="EN-US_TOPIC_0000001460882324__rba75bb46775a45bb82d6240afe7a29d9"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__aa9ef55d30b5d4330b9829575885cb5ca">Bit 0</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__ab2296a1347964039830d07c006673c3c">Whether to audit the CREATE, DROP, and ALTER operations on databases.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__u1d984c57b0e84e02ac37993fb08a7627"><li id="EN-US_TOPIC_0000001460882324__l32246c33408e4ac394ea12e4bc68d102"><strong id="EN-US_TOPIC_0000001460882324__b117660129442419">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001460882324__l6888fe155c5a410cae63c693a4581285"><strong id="EN-US_TOPIC_0000001460882324__b56345560342419">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__rfad1fdd8f8094475820202d1f219c88c"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__a05f2560f308945968420f21c125b6eeb">Bit 1</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__ac1267e7f94974b078e31ef11114eb291">Whether to audit the CREATE, DROP, and ALTER operations on schemas.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__u607278c2079d4ceaa238f170f8e55df2"><li id="EN-US_TOPIC_0000001460882324__lb9d9374528974331a40d03ce65c6b31d"><strong id="EN-US_TOPIC_0000001460882324__b86067393642419">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001460882324__l3ac67d85d2b44fceb23bd6a131c7dede"><strong id="EN-US_TOPIC_0000001460882324__b131869539442419">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__rb13d998f83b2482688f795644c40fa5c"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__a75670dd52bbf42d3b304b6cbb47f715a">Bit 2</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__acc7a59f938134440b2eb7cd4dc96b4fb">Whether to audit the CREATE, DROP, and ALTER operations on users.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__u181f2bcf4c014169b3607d138c50ebac"><li id="EN-US_TOPIC_0000001460882324__l14106c6211a0478cb0d406d1d31f28c0"><strong id="EN-US_TOPIC_0000001460882324__b168124655242419">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001460882324__le6c7edfdf0ce4775b7aba230b765a929"><strong id="EN-US_TOPIC_0000001460882324__b53214593942419">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__rdc71bfe9edbf4e6dac85c9a10ffa2558"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__a1335f061ab5546af9b50b6b7bb7532b7">Bit 3</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__a045a476701414991b6e2f87272b2d5da">Whether to audit the CREATE, DROP, ALTER, and TRUNCATE operations on tables.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__ub20155f40636414c8635410d92cc22f9"><li id="EN-US_TOPIC_0000001460882324__l22e960b8907e4c58b1cd8783d0e417d6"><strong id="EN-US_TOPIC_0000001460882324__b84235270616132">0</strong> indicates that the CREATE, DROP, ALTER, and TRUNCATE operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001460882324__l635ad00c9e014a8285e3584048c61287"><strong id="EN-US_TOPIC_0000001460882324__b842352706161328">1</strong> indicates that the CREATE, DROP, ALTER, and TRUNCATE operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__rbc3ccce0cdce4077816f28a579536fd5"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__a05f5bfde382c44f2bcd9173ee9eb8a80">Bit 4</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__a8ef19894880242c9bd68caf60baed6f9">Whether to audit the CREATE, DROP, and ALTER operations on indexes.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__u074b816efaf34a958abd345c88d7ec3e"><li id="EN-US_TOPIC_0000001460882324__lf1049d0918404b47b00de4e30039e1b2"><strong id="EN-US_TOPIC_0000001460882324__b92491583442419">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001460882324__ldb61df36f7de430eab9377c7cab9750a"><strong id="EN-US_TOPIC_0000001460882324__b6818429542419">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__r424b5286e90d4e41975c594f3f0b8483"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__ae3257264e4fe4b98bb933918214ae3e0">Bit 5</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__a969256fe3f0c44f6b194a3a52e45d754">Whether to audit the CREATE, DROP, and ALTER operations on views.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__u185fc05dbcc4434d92e575d02e34ee5e"><li id="EN-US_TOPIC_0000001460882324__l40378ce68bce48d3aea433b082f5f7a0"><strong id="EN-US_TOPIC_0000001460882324__b2830102714491">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001460882324__l8aee4b1c43604d178a5c7bc607135c74"><strong id="EN-US_TOPIC_0000001460882324__b12539183154912">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__r24d34fb3a5dc43b5b42835a4a4ca1127"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__a62885348be344ac2acff123515693df4">Bit 6</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__a586d0e9e34db4836803524308fdcced1">Whether to audit the CREATE, DROP, and ALTER operations on triggers.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__u12daa9ec6fca40ccbd2b525a2de85454"><li id="EN-US_TOPIC_0000001460882324__lf5757b8c40bb444e902ed7a81e5bb63c"><strong id="EN-US_TOPIC_0000001460882324__b121012926942419">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001460882324__l4ad70deabe0a4cf78c63e2dee6f9a73a"><strong id="EN-US_TOPIC_0000001460882324__b1502662642419">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__r7a1cb40a13784ca5b43daac6e2fe74f1"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__ac96684bc537d48c7a7a63b8a9fb211fa">Bit 7</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__a7b02c4af0748475790103db9d2995195">Whether to audit the CREATE, DROP, and ALTER operations on procedures/functions.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__u95c07aafa44a4a799bfece938f0efdb6"><li id="EN-US_TOPIC_0000001460882324__ld3bfdc7cdb984000a136f61cee2c50b6"><strong id="EN-US_TOPIC_0000001460882324__b159060186642419">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001460882324__ldc6f0528060c4610bb69d8bca02b4751"><strong id="EN-US_TOPIC_0000001460882324__b45056097142419">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__re86396815659456aa5286570e92a3832"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__adb0e0f903ede4c75945a06407c92632c">Bit 8</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__ac49e25fc98e5452bbceb5481487afaad">Whether to audit the CREATE, DROP, and ALTER operations on tablespaces.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__u6be66d3cfab8445bbe645a4b75de5388"><li id="EN-US_TOPIC_0000001460882324__lb18fc1d211b548959650c16ac16e09b9"><strong id="EN-US_TOPIC_0000001460882324__b141338320142419">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001460882324__l05c145e4acbb466a9a1e9c1e00cfd469"><strong id="EN-US_TOPIC_0000001460882324__b51424229642419">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__r20cd704f23de4cd594c2cc90ddebf3c0"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__a97dc6b180a9940d3ab481f22981cd00e">Bit 9</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__affabf57b4d494ea78f30bbe26eff99fe">Whether to audit the CREATE, DROP, and ALTER operations on resource pools.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__udd9ee81a8ee245cd92c1a984165f086e"><li id="EN-US_TOPIC_0000001460882324__le62a56af09e64667bf10b7d3b9ff038d"><strong id="EN-US_TOPIC_0000001460882324__b106328533442419">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001460882324__l108e49f4a2b844a0860d9e1534cde657"><strong id="EN-US_TOPIC_0000001460882324__b111079617942419">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__r807f1af5e20248d0b1ed1b51b920d095"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__ab6c9f7636aab4bb9bb6a2465151dcc8f">Bit 10</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__a31f7bceb711446e88d973e0f6001ecef">Whether to audit the CREATE, DROP, and ALTER operations on workloads.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__u449abbec4c0e4c3692ba3f34ef4a70ac"><li id="EN-US_TOPIC_0000001460882324__l16346709b01b4e928283d9528d353f30"><strong id="EN-US_TOPIC_0000001460882324__b60026876942419">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001460882324__l32291d461c884def995f8bccd810437a"><strong id="EN-US_TOPIC_0000001460882324__b149110963042419">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__r146f35d8c36b44098895d25ac331a2b7"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__abd3c790052ff43a698559d2a8985fb0f">Bit 11</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__a941340101f3842a9be602e1b3e1657ed">Whether to audit the CREATE, DROP, and ALTER operations on SERVER FOR HADOOP objects.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__udf119a537653426c8dcd32f1432755de"><li id="EN-US_TOPIC_0000001460882324__l696c740d89fe4061923b7479c7a9a358"><strong id="EN-US_TOPIC_0000001460882324__b94961450142419">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001460882324__l79593c61a08c444fae84612b5a3e6457"><strong id="EN-US_TOPIC_0000001460882324__b207216917742419">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__row18587823135616"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__p18588723165618">Bit 12</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__p8588112385617">Whether to audit the CREATE, DROP, and ALTER operations on data sources.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__ul414819581"><li id="EN-US_TOPIC_0000001460882324__li11168175813"><strong id="EN-US_TOPIC_0000001460882324__b184324142742419">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li></ul>
<ul id="EN-US_TOPIC_0000001460882324__ul979823312575"><li id="EN-US_TOPIC_0000001460882324__li280183395710"><strong id="EN-US_TOPIC_0000001460882324__b174545782342419">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__row14996171520226"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__p13997415182219">Bit 13</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__p10997171592219">Whether to audit the CREATE, DROP, and ALTER operations on Node Groups.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__ul1984414587225"><li id="EN-US_TOPIC_0000001460882324__li28452582225"><strong id="EN-US_TOPIC_0000001460882324__b784333313497">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li></ul>
<ul id="EN-US_TOPIC_0000001460882324__ul7846158102211"><li id="EN-US_TOPIC_0000001460882324__li4847125816222"><strong id="EN-US_TOPIC_0000001460882324__b162061736134911">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__row186561926144118"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__p12658192619413">Bit 14</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__p265872613415">Whether to audit the CREATE, DROP, and ALTER operations on ROW LEVEL SECURITY objects.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__ul9841936124412"><li id="EN-US_TOPIC_0000001460882324__li2841173611445"><strong id="EN-US_TOPIC_0000001460882324__b95960555242419">0</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are not audited.</li><li id="EN-US_TOPIC_0000001460882324__li16915843154411"><strong id="EN-US_TOPIC_0000001460882324__b90698893042419">1</strong> indicates that the CREATE, DROP, and ALTER operations on these objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__row4808247102118"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__p1680944712110">Bit 15</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__p128093473217">Whether to audit the CREATE, DROP, and ALTER operations on types.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__ul15303111582319"><li id="EN-US_TOPIC_0000001460882324__li13303131562319"><strong id="EN-US_TOPIC_0000001460882324__b172896416391">0</strong> indicates that the CREATE, DROP, and ALTER operations on types are not audited.</li><li id="EN-US_TOPIC_0000001460882324__li9303121515237"><strong id="EN-US_TOPIC_0000001460882324__b18427523153914">1</strong> indicates that the CREATE, DROP, and ALTER operations on types are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__row191581657111714"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__p777252101717">Bit 16</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__p17771252171710">Whether to audit the CREATE, DROP, and ALTER operations on text search objects (configurations and dictionaries)</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__ul7781052121710"><li id="EN-US_TOPIC_0000001460882324__li19785522172"><strong id="EN-US_TOPIC_0000001460882324__b13877813417">0</strong> indicates that the CREATE, DROP, and ALTER operations on text search objects are not audited.</li><li id="EN-US_TOPIC_0000001460882324__li207895215171"><strong id="EN-US_TOPIC_0000001460882324__b0959435174112">1</strong> indicates that the CREATE, DROP, and ALTER operations on text search objects are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__row9578135522119"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__p457918556215">Bit 17</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__p145791855132118">Whether to audit the CREATE, DROP, and ALTER operations on directories.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__ul87171831122315"><li id="EN-US_TOPIC_0000001460882324__li8717531192315"><strong id="EN-US_TOPIC_0000001460882324__b7263752124111">0</strong> indicates that the CREATE, DROP, and ALTER operations on directories are not audited.</li><li id="EN-US_TOPIC_0000001460882324__li1871783122311"><strong id="EN-US_TOPIC_0000001460882324__b35297514424">1</strong> indicates that the CREATE, DROP, and ALTER operations on directories are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__row053923263116"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__p654063210311">Bit 18</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__p1054053210315">Whether to audit the CREATE, DROP, and ALTER operations on workloads.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__ul2222131763217"><li id="EN-US_TOPIC_0000001460882324__li1422291783215"><strong id="EN-US_TOPIC_0000001460882324__b1583800336">0</strong> indicates that the CREATE, DROP, and ALTER operations on types are not audited.</li><li id="EN-US_TOPIC_0000001460882324__li32221817123214"><strong id="EN-US_TOPIC_0000001460882324__b1789260169">1</strong> indicates that the CREATE, DROP, and ALTER operations on types are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__row203721951194513"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__p18373115134518">Bit 19</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__p10373185114459">Whether to audit the CREATE, DROP, and ALTER operations on redaction policies.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__ul16867132164619"><li id="EN-US_TOPIC_0000001460882324__li108672216463"><strong id="EN-US_TOPIC_0000001460882324__b980741695">0</strong> indicates that the CREATE, DROP, and ALTER operations on redaction policies are not audited.</li><li id="EN-US_TOPIC_0000001460882324__li8867132115460"><strong id="EN-US_TOPIC_0000001460882324__b1264719341885">1</strong> indicates that the CREATE, DROP, and ALTER operations on redaction policies are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__row1931552811320"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__p331512863218">Bit 20</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__p1731592810321">Whether to audit the CREATE, DROP, and ALTER operations on sequences.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__ul1876672411367"><li id="EN-US_TOPIC_0000001460882324__li576612420367"><strong id="EN-US_TOPIC_0000001460882324__b174541281122">0</strong> indicates that the CREATE, DROP, and ALTER operations on sequences are not audited.</li><li id="EN-US_TOPIC_0000001460882324__li19766102411363"><strong id="EN-US_TOPIC_0000001460882324__b172541931417">1</strong> indicates that the CREATE, DROP, and ALTER operations on sequences are audited.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001460882324__row594422319329"><td class="cellrowborder" valign="top" width="18.23%" headers="mcps1.3.4.9.2.4.1.1 "><p id="EN-US_TOPIC_0000001460882324__p99451023173215">Bit 21</p>
</td>
<td class="cellrowborder" valign="top" width="34.64%" headers="mcps1.3.4.9.2.4.1.2 "><p id="EN-US_TOPIC_0000001460882324__p99451823203219">Whether to audit the CREATE, DROP, and ALTER operations on nodes.</p>
</td>
<td class="cellrowborder" valign="top" width="47.13%" headers="mcps1.3.4.9.2.4.1.3 "><ul id="EN-US_TOPIC_0000001460882324__ul77431225133617"><li id="EN-US_TOPIC_0000001460882324__li167431325133612"><strong id="EN-US_TOPIC_0000001460882324__b4447154111510">0</strong> indicates that the CREATE, DROP, and ALTER operations on nodes are not audited.</li><li id="EN-US_TOPIC_0000001460882324__li374310254361"><strong id="EN-US_TOPIC_0000001460882324__b19371834165">1</strong> indicates that the CREATE, DROP, and ALTER operations on nodes are audited.</li></ul>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="EN-US_TOPIC_0000001460882324__s379a90633cb244f2bfcf9c2ac8e5d04a"><h4 class="sectiontitle">enableSeparationOfDuty</h4><p id="EN-US_TOPIC_0000001460882324__a9f837910e54d4d44a6c0220ca589d784"><strong id="EN-US_TOPIC_0000001460882324__en-us_topic_0059777487_ac047b77e20f04edd92af9bbc9e4bc485">Parameter description</strong>: Specifies whether the separation of permissions is enabled.</p>
<p id="EN-US_TOPIC_0000001460882324__p6572192810285"><strong id="EN-US_TOPIC_0000001460882324__b3712119493">Type</strong>: POSTMASTER</p>
<p id="EN-US_TOPIC_0000001460882324__ad1630f2e05b34780a1452ac41ea898da"><strong id="EN-US_TOPIC_0000001460882324__en-us_topic_0059777487_a82ee6ba8e01d46ddb5bca0feb3aa932e">Value range</strong>: Boolean</p>
<ul id="EN-US_TOPIC_0000001460882324__ua5f3a84c03a644a79512e49366f0df56"><li id="EN-US_TOPIC_0000001460882324__l456e9706acdf40b19132d5598b86b0d4"><strong id="EN-US_TOPIC_0000001460882324__b842352706173031">on</strong> indicates that the separation of permissions is enabled.</li><li id="EN-US_TOPIC_0000001460882324__lc8c2f043200b447bbe137088383c13e0"><strong id="EN-US_TOPIC_0000001460882324__b842352706173054">off</strong> indicates that the separation of permissions is disabled.</li></ul>
<p id="EN-US_TOPIC_0000001460882324__ac651feac904646b1954a16b756f68ed4"><strong id="EN-US_TOPIC_0000001460882324__b1212386603">Default value</strong>: <strong id="EN-US_TOPIC_0000001460882324__b851491159">off</strong></p>
</div>
<div class="section" id="EN-US_TOPIC_0000001460882324__section97799406198"><h4 class="sectiontitle">security_enable_options</h4><p id="EN-US_TOPIC_0000001460882324__p477944041917"><strong id="EN-US_TOPIC_0000001460882324__b1648599597">Parameter description</strong>: Specifies whether <strong id="EN-US_TOPIC_0000001460882324__b641433912590">grant_to_public</strong>,<strong id="EN-US_TOPIC_0000001460882324__b6463840105916"> grant_with_grant_option</strong>, and <strong id="EN-US_TOPIC_0000001460882324__b1929713424596">foreign_table_options</strong> can be used in security mode. This parameter is supported by version 8.2.0 or later clusters.</p>
<p id="EN-US_TOPIC_0000001460882324__p27791040101919"><strong id="EN-US_TOPIC_0000001460882324__b538348102">Type</strong>: SIGHUP</p>
<p id="EN-US_TOPIC_0000001460882324__p1977924011913"><strong id="EN-US_TOPIC_0000001460882324__b1755788840">Value range</strong>: a string</p>
<ul id="EN-US_TOPIC_0000001460882324__ul1077914402194"><li id="EN-US_TOPIC_0000001460882324__li656834115286"><strong id="EN-US_TOPIC_0000001460882324__b64995976542420">on</strong> indicates that <strong id="EN-US_TOPIC_0000001460882324__b131751257042420">grant to public</strong> can be used in security mode.</li><li id="EN-US_TOPIC_0000001460882324__li756864122817"><strong id="EN-US_TOPIC_0000001460882324__b9043535642420">on</strong> indicates that <strong id="EN-US_TOPIC_0000001460882324__b137821429242420">with grant option</strong> can be used in security mode.</li><li id="EN-US_TOPIC_0000001460882324__li16568134152815"><strong id="EN-US_TOPIC_0000001460882324__b9394165420215">foreign_table_options</strong> allows users to perform operations on foreign tables in security mode without explicitly granting the <strong id="EN-US_TOPIC_0000001460882324__b137311537">useft</strong> permission to users.</li></ul>
<p id="EN-US_TOPIC_0000001460882324__p4779124061917"><strong id="EN-US_TOPIC_0000001460882324__b177984021915">Default value</strong>: empty</p>
<div class="note" id="EN-US_TOPIC_0000001460882324__note07397208204"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="EN-US_TOPIC_0000001460882324__ul21016475578"><li id="EN-US_TOPIC_0000001460882324__li01084785714">In a newly installed cluster, this parameter is left blank by default, indicating that none of <strong id="EN-US_TOPIC_0000001460882324__b537417431538">grant_to_public</strong>, <strong id="EN-US_TOPIC_0000001460882324__b662213443316">grant_with_grant_option</strong>, and <strong id="EN-US_TOPIC_0000001460882324__b87276461932">foreign_table_options</strong> can be used in security mode.</li><li id="EN-US_TOPIC_0000001460882324__li151924975717">In upgrade scenarios, the default value of this parameter is forward compatible. If the default values of <strong id="EN-US_TOPIC_0000001460882324__b21048501757">enable_grant_public</strong> and <strong id="EN-US_TOPIC_0000001460882324__b762112514512">enable_grant_option</strong> are <strong id="EN-US_TOPIC_0000001460882324__b1222118534518">ON</strong> before the upgrade, the default value of <strong id="EN-US_TOPIC_0000001460882324__b126499213611">security_enable_options</strong> is <strong id="EN-US_TOPIC_0000001460882324__b44587766">grant_to_public, grant_with_grant_option</strong> after the upgrade.</li></ul>
</div></div>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="dws_04_0937.html">Auditing</a></div>
</div>
</div>
View Git Blame Copy Permalink