Re: How to check when was the role disabled/revoked for a particular Sybase login

Very good points Luz and Bret.

No ASE does not keep track of WHEN many commands where executed.

However, Vinay, auditing can track EVERY command that is executed when auditing is configured.

To configure auditing:

Configure the Audit System - Security Administration Guide - SAP Library

Then:

sp_audit <option>, <login_name>, <object_name> [,<setting>]

To audit all commands executed against ASE:

EXEC sp_audit "cmd_txt", "on"

GO

See full syntax at:

http://help.sap.com/saphelp_ase160/helpdata/en/ab/54050ebc2b1014b5d9ca93507f4a1d/content.htm

NOTE: Depending on the nature of the ASE server, OLTP, or DSS, and volume of transactions,

           this may generate a large amount of activity in the sybsecurity database, so

           proper measures must be taken into account. E.g. implement segment thresholds,

           last chance thresholds, data archiving, and log pruning.

Regards,

Jean-Pierre

Message was edited by: Jean-Pierre Dareys. Added link to syntax for the sp_audit command.