GRANT and REVOKE trigger on a ddl_command_end event trigger but don't provide any information beyond whether it was a table, schema, function, etc. that was affected. No object IDs or the like are included. How would you find out which table had its ACLs modified?
Also, why do grants and revokes have an object_type of 'TABLE' instead of lower case names like 'table' for all other event types?
Thanks,
Miles Elam