RE: Adopted authority vs profile switching

[Vern Hamberg <vhamberg@xxxxxxxxxxxxxxxxxxxxxxxxx>]

GA, the documentation on QSYGETPH says

"If security-related events are being audited, adds an entry to the QAUDJRN 
audit journal to indicate that a profile handle is created."

There are system values that control what goes into the audit journal. 
QAUDCTL and QAUDLVL are the pertinent ones here, IIRC.

I assume the other APIs will cause entries to be generated. Gotta look at 
the docs.

Any info on this is in the API docs, under Security APIs. Have fun 
digging.  ;-) In InfoCenter this stuff is under Programming->APIs - the API 
finder is good if you know what you want, but you could use the category 
item to get to these.

Vern

At 10:45 AM 7/22/2004, you wrote:
> --- Vern Hamberg <vhamberg@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
> >
> > If you are using the audit journal, it can be recorded.
> >
> > Vern
>
> OK, I see the PS entry in the manual.  But you said "it *can* be
> recorded".  Do I have to do something to tell the system to record these?
> There are no PS entries in *CURCHAIN on our box.
>
> Somewhere else in this thread someone mentioned there are certain things
> that a switched profile cannot do that it might otherwise be able to if it
> were actually the signed-on profile.  Does IBM mention this anywhere?
>
> Thanks again,
> GA
>
>
>
> __________________________________
> Do you Yahoo!?
> Yahoo! Mail Address AutoComplete - You start. We finish.
> http://promotions.yahoo.com/new_mail
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.