Re: Active users

Thanks Rob.

I have added all of those into a Run SQL script and can get most of what I
would need.

With the QSYS2.IFS_OBJECT_STATISTICS it shows the last changed date for
DATA_CHANGE_TIMESTAMP which is very useful, any way to get the user
associated with that last change ?

Cheers

Don





From: "Rob Berendt" <robertowenberendt@xxxxxxxxx>
To: "Midrange Systems Technical Discussion"
<midrange-l@xxxxxxxxxxxxxxxxxx>
Date: 31/03/2023 12:18 AM
Subject: Re: Active users
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxxxxxxxx>



There are SQL services which will do any number of things. Including but
not limited to:
- Your trick of WRKOBJLCK of the user profile
https://www.ibm.com/docs/en/i/7.5?topic=services-object-lock-info-view
- Find all of a users currently active jobs
https://www.ibm.com/docs/en/i/7.5?topic=services-active-job-info-table-function

(see CURRENT_USER_LIST_FILTER)
- Look at the joblog
https://www.ibm.com/docs/en/i/7.5?topic=services-joblog-info-table-function

- If you're into stone knives and bearskins and still spool up joblogs
then
completed joblogs can be read with
https://www.ibm.com/docs/en/i/7.5?topic=services-spooled-file-data-table-function

- If you want to see who has an ifs file locked
https://www.ibm.com/docs/en/i/7.5?topic=services-ifs-object-lock-info-table-function

- Find out changed, accessed timestamps or if that IFS file is currently
checked out
https://www.ibm.com/docs/en/i/7.5?topic=services-ifs-object-statistics-table-function

But you may have to audit to get more details.

On Wed, Mar 29, 2023 at 5:24 AM Don Brown via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

I am about to engage a developer for a small project who will be working
remotely and I am just trying to make sure I have the environment set up
securely/correctly and had a couple of questions ...


If I want to see who is on the system in a green screen environment I

just

look at the active jobs in qinter or other interactive sub systems.

From there I can look at the job log to see a little of what they are
doing.

But if a remote developer is working in the IFS how can I firstly see if
anyone is connected and what they are doing.

I can wrkobjlck on the user profile and see the jobs associated but that
is hit and miss

I don't currently have object auditing of IFS objects turned on but that
may be something I should consider.

Currently all IFS directories are *public *exclude and access is granted
by authority list so for the developer they only have access to the
specific directories they need. Am I missing anything here ?

Libraries are also protected by authority list with no *public access.

Thanks

Don



--
This email has been scanned for computer viruses. Although MSD has taken
reasonable precautions to ensure no viruses are present in this email,

MSD

cannot accept responsibility for any loss or damage arising from the use

of

this email or attachments..
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.