mode := "r"
			if ev.writing {
				mode = "rw"
			}
			tableName := ""
			// We only have a valid *table* name if the object being
			// audited is table-like (includes view, sequence etc). For
			// now, this is sufficient because the auditing feature can
			// only audit tables. If/when the mechanisms are extended to
			// audit databases and schema, we need more logic here to
			// extract a name to include in the logging events.
			tn, err := p.getQualifiedTableName(ctx, ev.desc)
			if err != nil {
				log.Warningf(ctx, "name for audited table ID %d not found: %v", ev.desc.GetID(), err)
			} else {
				tableName = tn.FQString()
			}
			entries[i] = &eventpb.SensitiveTableAccess{
				CommonSQLEventDetails: eventpb.CommonSQLEventDetails{
					DescriptorID: uint32(ev.desc.GetID()),
				},
				CommonSQLExecDetails: execDetails,
				TableName:            tableName,
				AccessMode:           mode,
			}