DATABASE_OBJECT_CHANGE_GROUP audit group does not audit drop proc - by SQLWaldorf

Status : 

  By Design<br /><br />
		The product team believes this item works according to its intended design.<br /><br />
		A more detailed explanation for the resolution of this particular item may have been provided in the comments section.


2
0
Sign in
to vote
ID 370103 Comments
Status Closed Workarounds
Type Bug Repros 0
Opened 9/26/2008 6:25:22 AM
Access Restriction Public

Description

When I activate a database audit specification with the DATABASE_OBJECT_CHANGE_GROUP
selected, and I create and drop a stored proc, only the create is in the audit log, but not the drop.
Sign in to post a comment.
Posted by William Soranno on 12/7/2011 at 8:16 AM
If this is working by design, then the documentation needs to be updated. MSDN article, http://msdn.microsoft.com/en-us/library/cc280663.aspx, states that DROP's are logged for the DATABASE_OBJECT_CHANGE_GROUP.
Posted by Microsoft on 10/10/2008 at 4:14 PM
Hi,

Thanks for your feedback. The behaviour you're seeing is by-design. In order to audit CREATE/DROP of an SP, you need to add the SCHEMA_OBJECT_CHANGE_GROUP to your audit specification. The DATABASE_OBJECT_CHANGE_GROUP is actually auditing the ALTER permission check on the SCHEMA as part of the CREATE statement.

Il-Sung.