Re: How to audit users of strsql? -- MIDRANGE-L

Thank you Luis.

-----Original Message-----
From: Luis Rodriguez <luisro58@xxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Sent: Wed, Jun 20, 2012 11:35 am
Subject: Re: How to audit users of strsql?

Frank,
It shouldn't be very hard to write a simple program (without all the bell
nd whistles of a commercial product, of course).
I think I have around an old program that checks if a user is authorized to
se SQL. Let me dig a little and I'll post the code as soon as I can.
Regards,
Luis Rodriguez
BM Certified Systems Expert — eServer i5 iSeries
-

n Wed, Jun 20, 2012 at 10:55 AM, <fbocch2595@xxxxxxx> wrote:

Luis, I'm not sure how to work with exit points, how involved a pgm would
be needed?

-----Original Message-----
From: Luis Rodriguez <luisro58@xxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Sent: Wed, Jun 20, 2012 9:56 am
Subject: Re: How to audit users of strsql?

Frank,
IIRC, working with SQL sessions is a real PITA. Also, a user could bypass
t easily using RUNSQLSTM, SQLRPGLE, etc.
What happens if you try to work with SQL's exit points?

est Regards,
Luis Rodriguez
BM Certified Systems Expert — eServer i5 iSeries
-

n Wed, Jun 20, 2012 at 9:14 AM, <fbocch2595@xxxxxxx> wrote:

Hi Y'all, for you folks that allow programmers to use strsql, how do you
audit them? My interest is in knowing the statements they run and what
data is changed via their strsql sessions. Is it possible to force
session
info to be generated upon their every use of strsql? I'd like to force an
sql session upon every strsql usage and then make sure that session can
not
be deleted. I think there's 3rd party software that will help but we'll
go
the native OS route for now.

Any suggestions/recommendations?

Thanks, Frank
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

-
his is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
o post a message email: MIDRANGE-L@xxxxxxxxxxxx
o subscribe, unsubscribe, or change list options,
isit: http://lists.midrange.com/mailman/listinfo/midrange-l
r email: MIDRANGE-L-request@xxxxxxxxxxxx
efore posting, please take a moment to review the archives
t http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

-
his is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
o post a message email: MIDRANGE-L@xxxxxxxxxxxx
o subscribe, unsubscribe, or change list options,
isit: http://lists.midrange.com/mailman/listinfo/midrange-l
r email: MIDRANGE-L-request@xxxxxxxxxxxx
efore posting, please take a moment to review the archives
t http://archive.midrange.com/midrange-l.