on 01-30-2023 3:44 PM
For Sarbanes Oxley auditing I audit DML statements to SAP-owned data by users other than SAPSID. This a monthly report of this activity is almost always empty but recently I discovered that the SQL Statement "MERGE DELTA OF...." executed by user system against a SAP-Owned table also produces an "UPDATE" record in the audit log associated with that Delta Merge operation.
As advertised, the only syntax that the UPDATE dml statement allows is 'SET COL_NAME=<some
Does anyone know what is being "UPDATED" ?
The MERGE DELTA statement has historically been implemented as part of the column store update operations. This is similar to the UPDATE COMPRESSION command, which still is exposed as an UPDATE with some HINTS.
One could argue that since the representation of the table contents in the internal structures is changed, UPDATE (i.e. data changes) is a somewhat correct. However, I would agree that this an unfortunate choice as SQL commands are generally only concerned with the data itself and not with how it is represented in the internal database structures.
Anyhow, the commands are issued by some user on custom tables. If that user shouldn't issue the commands, then revoking the privileges to do so would be the best course of action.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
85 | |
10 | |
9 | |
9 | |
6 | |
6 | |
6 | |
5 | |
3 | |
3 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.