Deleted files
WE have a PF file that got deleted, we don't do job logs unlwss there is a problem...is there anyway to tell who deleted it? Also for in the future, what is the best way to be able to track deletions? We have 9 people that have all obj authority. Also is it possible that the file could get deleted during the following command CPYSPLF File(QPDSPJOB) tofile(qgpl/djob) splnbr(*last) mbropt(*replace) if there was a system problem/error say a session went down etc. ?
Thanks
Ann
Software/Hardware used:
Software/Hardware used:
ASKED:
January 30, 2007 8:44 AM
UPDATED:
October 24, 2007 2:22 PM
Answer Wiki:
As far as I know there's no way to track who deleted an object, the only way to do this is scanning the joblogs, but this needs to be activeted in your case. It might be better to create a group-profile for the 9 people and deny them the existence right on objects. In that case they can rename or move the object but can't delete it. You can make a scheduled job that checks the rights for the group-account and adds/deletes rights for *allusr objects for this group.
The cpysplf only replaces the member, so if something goes wrong with the job, the member can be gone, but the file must still be there. If the system goes down unexpectedly, the object can get damaged and/or moved to the qrecovery library.<b> You can review the audit journals to determine who deleted an object. Your system value QAUDLVL must include *DELETE before this action is logged to the journal.</b>
To see all answers submitted to the Answer Wiki: View Answer History.
RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
