Specifying the tenancy log entry type (Sec.TenancyTrace) enables additional logging for the Progress Application Server (PAS) for OpenEdge (agent) log file. This logging aids in troubleshooting an application's management of database user IDs that control access to tenant data.

The Sec.TenancyTrace log entry type provides information at the following logging levels:
  • Level 2 (Basic) — Logs a message if the Safe User ID feature is enabled.
  • Level 3 (Verbose) — Logs messages displaying the current user ID associated with the database connection and any changes to it.
At logging level 2, if the Safe User ID feature is enabled, a message is logged stating that a given multi-tenant database has the feature enabled:
Database logical-db-name has the SafeUserId feature enabled
At logging level 3, the following messages are written to the log file:
  • For all connected multi-tenant databases, the ABL session logs a single message that displays the tenant name currently associated with the connection, for every new request.
    Current: logical-db-name,tenant-name [;logical-db-name,tenant-name [;logical-db-name,tenant-name…]]
  • A message is logged when the ABL application changes a database's current user ID via the SET-DB-CLIENT function, the SETUSERID function, or the SET-CLIENT() method of the SECURITY-POLICY system handle. A message is logged to record the change for the single database connection.
    Updated: logical-db-name,tenant-name
  • If the Safe User ID feature is enabled, a message is logged when the safe user ID is re-asserted.
    SafeID: logical-db-name,tenant-name