Auditing grant and revoke commands

When auditing the grant and revoke commands, the command text is written to position two of the extrainfo column of the audit record. Comments are filtered unless they are quoted such as: "/* audit comment */" or bracketed, such as "[/* audit comment */]". Extra white space is filtered. See “Reading the extrainfo column” for more information.

If the grant or revoke command is executed from inside a stored procedure, the grantee and the permission granted will be written instead.

The following is an example of the extrainfo column of an audit record for grant role sso_role to user1:

sa_role sso_role oper_role sybase_ts_role mon_role; grant role sso_role to user1; ; ; ; ; sa/ase;   

The following is an example of the extrainfo column of an audit record for revoke role sso_role from user1:

sa_role sso_role oper_role sybase_ts_role mon_role; revoke role sso_role from user1; ; ; ; ; sa/ase;