Re: System Auditing of *USRPRF's

On 18-Aug-2015 15:58 -0600, Graap, Kenneth wrote:

I'm a little surprised that ZC and/or ZR records aren't being placed
in the system audit journal when I submit a batch job using another
user profile.

I changed the Object Auditing Attribute for PROFILE1 to *ALL

I then signed on as PROFILE2 and submitted a batch job specifying
that it run as PROFILE1.

PROFILE2 is authorized to PROFILE1 so there weren't any AF
(Authority Failure) entries in the Audit Journal.

However, there were no ZR (Read Access) or ZC (Change Access) entries
either.

Wouldn't you think that when I submit a job to run as another user
profile and Object Auditing for that profile is set to *ALL, that
the system would at least deposit a ZR record in the Audit Journal?

Any ideas why this isn't happening???

FWiW:

[http://www.ibm.com/support/knowledgecenter/api/content/ssw_ibm_i_71/rzarl/rzarle87.htm]
_Operations for User Profile_ (*USRPRF)
"This list describes the operations that you can perform against User Profile (*USRPRF), and whether those operations are audited.

• Read operation

RCLOBJOWN
Reclaim Objects by Owner

• Change operation
...
...

Parent topic: _Object operations and auditing_ [http://www.ibm.com/support/knowledgecenter/api/content/ssw_ibm_i_71/rzarl/rzarlaudops.htm]

..."