Re: Active users

[Don Brown <DBrown@xxxxxxxxxx>]

Thanks Rob.

I have added all of those into a Run SQL script and can get most of what I 
would need.

With the QSYS2.IFS_OBJECT_STATISTICS it shows the last changed date for 
DATA_CHANGE_TIMESTAMP which is very useful, any way to get the user 
associated with that last change ?

Cheers

Don





From:   "Rob Berendt" <robertowenberendt@xxxxxxxxx>
To:     "Midrange Systems Technical Discussion" 
<midrange-l@xxxxxxxxxxxxxxxxxx>
Date:   31/03/2023 12:18 AM
Subject:        Re: Active users
Sent by:        "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxxxxxxxx>



There are SQL services which will do any number of things.  Including but
not limited to:
- Your trick of WRKOBJLCK of the user profile
https://www.ibm.com/docs/en/i/7.5?topic=services-object-lock-info-view
- Find all of a users currently active jobs
https://www.ibm.com/docs/en/i/7.5?topic=services-active-job-info-table-function

(see CURRENT_USER_LIST_FILTER)
- Look at the joblog
https://www.ibm.com/docs/en/i/7.5?topic=services-joblog-info-table-function

- If you're into stone knives and bearskins and still spool up joblogs 
then
completed joblogs can be read with
https://www.ibm.com/docs/en/i/7.5?topic=services-spooled-file-data-table-function

- If you want to see who has an ifs file locked
https://www.ibm.com/docs/en/i/7.5?topic=services-ifs-object-lock-info-table-function

- Find out changed, accessed timestamps or if that IFS file is currently
checked out
https://www.ibm.com/docs/en/i/7.5?topic=services-ifs-object-statistics-table-function

But you may have to audit to get more details.

On Wed, Mar 29, 2023 at 5:24 AM Don Brown via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

> I am about to engage a developer for a small project who will be working
> remotely and I am just trying to make sure I have the environment set up
> securely/correctly and had a couple of questions ...
>
>
> If I want to see who is on the system in a green screen environment I 
just
> look at the active jobs in qinter or other interactive sub systems.
>
> From there I can look at the job log to see a little of what they are
> doing.
>
> But if a remote developer is working in the IFS how can I firstly see if
> anyone is connected and what they are doing.
>
> I can wrkobjlck on the user profile and see the jobs associated but that
> is hit and miss
>
> I don't currently have object auditing of IFS objects turned on but that
> may be something I should consider.
>
> Currently all IFS directories are *public *exclude and access is granted
> by authority list so for the developer they only have access to the
> specific directories they need. Am I missing anything here ?
>
> Libraries are also protected by authority list with no *public access.
>
> Thanks
>
> Don
>
>
>
> --
> This email has been scanned for computer viruses. Although MSD has taken
> reasonable precautions to ensure no viruses are present in this email, 
MSD
> cannot accept responsibility for any loss or damage arising from the use 
of
> this email or attachments..
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.