Re: Auditing of SQL Statements via STRSQL

Not as easy as turning on auditing or journaling but if you're up to
writing some code you may want to look at the Open Database File Exit
Program interface (in the Database and File category of system APIs) to
catch file accesses (system wide) and for a bit more detail the exit
program could selectively use Retrieve Job Information format JOBI0900 (in
the Work Management category of system APIs) along with other APIs.

Bruce Vining



                                                                           
             "Norbut, Jim"                                                 
             <Jim.Norbut@Grubb                                             
             -Ellis.com>                                                To 
             Sent by:                  "midrange-l"                        
             midrange-l-bounce         <midrange-l@xxxxxxxxxxxx>           
             s+bvining=us.ibm.                                          cc 
             com@xxxxxxxxxxxx                                              
                                                                   Subject 
                                       Auditing of SQL Statements via      
             07/08/2005 08:09          STRSQL                              
             AM                                                            
                                                                           
                                                                           
             Please respond to                                             
             Midrange Systems                                              
                 Technical                                                 
                Discussion                                                 
                                                                           
                                                                           




I can see where I am able to turn on "auditing" of commands that a user
types in QAUDJRN on a user by user basis.

Is there a way to log/audit things done in SQL via STRSQL and typing in
commands that way to update tables.

(This is in response to a request re: Sarbanes/Oxley.....not for a rogue
user who we are watching)

Thanks,

Jim

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.