SAP Knowledge Base Article - Preview

2975564 - Audit records need to contain the database name of where system procs are executed - SAP ASE

Symptom

Even if you have configured the auditing for the system stored procedure, Audit records doesn't contain the database name of where system procs are executed.
You can confirm with the following 2 options about this behavior.

For example

  1. System procedures explicitly specified by sp_audit "exec_procedure", "all", "<system procedure name>", "on"

    1> use sybsecurity
    2> go
    1> sp_audit "exec_procedure", "all", "sybsystemprocs.dbo.sp_adduser", "on"
    2> go

    1> use testdb
    2> go
    1> sp_adduser UserA
    2> go

    1> use sybsecurity
    2> go
    1> select * from sysaudits_01
    2> go

    event eventmod spid eventtime sequence suid dbid objid xactid loginname dbname objname objowner extrainfo nodeid
    38 1 26 Sep 23 2020  6:00PM 1 1 31514 1536005472 NULL sa sybsystemprocs sp_adduser dbo sa_role sso_role oper_role sybase_ts_role mon_role js_admin_role; ; ; ; UserA; ; ; NULL
  1. System procedures implicitly processed by sp_audit 'security', 'all', 'all', 'on'

    1> use sybsecurity
    2> go
    1> sp_audit 'security', 'all', 'all', 'on'
    2> go

    1> use testdb
    2> go
    1> sp_adduser UserA
    2> go

    1> use sybsecurity
    2> go
    1> select * from sysaudits_01
    2> go

    event eventmod spid eventtime sequence suid dbid objid xactid loginname dbname objname objowner extrainfo nodeid
    38 1 26 Sep 23 2020  6:01PM 1 1 31514 1536005472 NULL sa sybsystemprocs sp_adduser dbo sa_role sso_role oper_role sybase_ts_role mon_role js_admin_role; ; ; ; sso_role; ; sa/ase;  NULL


Read more...

Environment

  • SAP Adaptive Server Enterprise (ASE )

Product

SAP Adaptive Server Enterprise 15.7 ; SAP Adaptive Server Enterprise 16.0

Keywords

CR822947, CR#822947, 822947, sysaudits , sysaudits_xx , sp_dropuser , sp_addalias , sp_dropalias , KBA , BC-SYB-ASE , Sybase ASE Database Platform (non Business Suite) , Product Enhancement

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.