Re: Application only access, was Commands for Limited Users
"Phil Ashe" <[email protected]>
| Newsgroups | gmane.comp.systems.as400.security |
|---|---|
| Message-ID | <[email protected]> |
Rob:
Let me know if you want this in another format.
This is from the data change.
Display Journal Entry Details
Journal . . . . . . : DDJRN Library . . . . . . :
PSAUDIT
Sequence . . . . . . : 11
Code . . . . . . . . : R - Operation on specific record
Type . . . . . . . . : UP - Update, after-image
Object . . . . . . . : ALLOBJD Library . . . . . . : PDA
Member . . . . . . . : ALLOBJD Flag . . . . . . . . : 0
Date . . . . . . . . : 09/07/06 Time . . . . . . . . :
13:19:49
Ref Constraint . . . : No
Count/RRN . . . . . : 1
Job . . . . . . . . : 735654/***ASHEP/QPADEV0007
<==Signed on user is ASHEP
Commit cycle ID . . : 0
User profile . . . . : ***QSECOFR Program . . . . . . :
QDZTD00001 <==Swapped user is QSECOFR
Ignore APY/RMV . . . : No Library . . . . . :
*OMITTED
Trigger . . . . . . : No ASP device . . . . :
*OMITTED
Press Enter to continue.
F3=Exit F10=Display entry F12=Cancel F14=Display previous entry
F15=Display only entry specific data
If you are auditing for it, you should also see two "PS" entries (one
was the swap-from, the other is the swap-to) then a JS entry in your
system audit journal.
Phil Ashe
NetIQ (A division of Attachmate)
1233 West Loop South, Suite 1800 | Houston, TX 77027 USA
713.418.5279 phone
[email protected]
www.netiq.com
-----Original Message-----
From: security400-bounces-Zwy7GipZuJhWk0Htik3J/[email protected]
[mailto:security400-bounces-Zwy7GipZuJhWk0Htik3J/[email protected]] On Behalf Of [email protected]
Sent: Thursday, September 07, 2006 1:11 PM
To: Security Administration on the AS400 / iSeries
Subject: Re: [Security400] Application only access,was Commands for
Limited Users
Do you have a sample journal entry?
Rob Berendt
--
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com
_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.