Symptom
Even if you have configured the auditing for the system stored procedure, Audit records doesn't contain the database name of where system procedures are executed.
You can confirm with the following 2 options about this behavior.
For example
-
System procedures explicitly specified by sp_audit "exec_procedure", "all", "<system procedure name>", "on"
1> use sybsecurity
2> go
1> sp_audit "exec_procedure", "all", "sybsystemprocs.dbo.sp_adduser", "on"
2> go1> use testdb
1> use sybsecurity
2> go
1> sp_adduser UserA
2> go
2> go
1> select * from sysaudits_01
2> go
event eventmod spid eventtime sequence suid dbid objid xactid loginname dbname objname objowner extrainfo nodeid 38 1 26 Sep 23 2020 6:00PM 1 1 31514 1536005472 NULL sa sybsystemprocs sp_adduser dbo sa_role sso_role oper_role sybase_ts_role mon_role js_admin_role; ; ; ; UserA; ; ; NULL
-
System procedures implicitly processed by sp_audit 'security', 'all', 'all', 'on'
1> use sybsecurity
2> go
1> sp_audit 'security', 'all', 'all', 'on'
2> go
1> use testdb
2> go
1> sp_adduser UserA
2> go
1> use sybsecurity
2> go
1> select * from sysaudits_01
2> goevent eventmod spid eventtime sequence suid dbid objid xactid loginname dbname objname objowner extrainfo nodeid 38 1 26 Sep 23 2020 6:01PM 1 1 31514 1536005472 NULL sa sybsystemprocs sp_adduser dbo sa_role sso_role oper_role sybase_ts_role mon_role js_admin_role; ; ; ; sso_role; ; sa/ase; NULL
Read more...
Environment
SAP Adaptive Server Enterprise (ASE), all versions
Product
Keywords
CR822947, CR#822947, 822947, sysaudits , sysaudits_xx , sp_dropuser , sp_addalias , sp_dropalias , KBA , BC-SYB-ASE , Sybase ASE Database Platform (non Business Suite) , Product Enhancement
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.