how to find which user deleted application plan



IBM's flagship relational database management system

how to find which user deleted application plan

Postby poojithas » Fri Mar 28, 2014 4:32 pm

Hi, One of our application plan is getting deleted frequently. We suspect some cranky user is doing this.
how to find which user is deleting the plan. Is this information can be found in Log files, if so, how to print that Log file.
poojithas
 
Posts: 15
Joined: Sun May 05, 2013 7:11 am
Has thanked: 0 time
Been thanked: 0 time

Re: how to find which user deleted application plan

 

Re: how to find which user deleted application plan

Postby NicC » Fri Mar 28, 2014 4:56 pm

try speaking to youir security guys - RACF, ACF, whatever.

If the person doing this should not be doing it then either the plan should be somewhere more secure or that person should have reduced access.
The problem I have is that people can explain things quickly but I can only comprehend slowly.
Regards
Nic
NicC
Global moderator
 
Posts: 2690
Joined: Sun Jul 04, 2010 12:13 am
Location: Pushing up the daisys (almost)
Has thanked: 4 times
Been thanked: 105 times

Re: how to find which user deleted application plan

Postby poojithas » Fri Mar 28, 2014 7:46 pm

I'm new to DBA job and finding this is on my shoulders, please help.
poojithas
 
Posts: 15
Joined: Sun May 05, 2013 7:11 am
Has thanked: 0 time
Been thanked: 0 time

Re: how to find which user deleted application plan

Postby dick scherrer » Sat Mar 29, 2014 12:29 am

Hello,

Why is a user able to delete a plan? :? I have Never seen this allowed and i believe it should have been stopped before it ever happened :(

You need to review which permissions have been granted to people and why. And fix those that are not apprpopriate.

If there is another dba for some other project in your organization, you should talk with them.
Hope this helps,
d.sch.
User avatar
dick scherrer
Global moderator
 
Posts: 6304
Joined: Sat Jun 09, 2007 8:58 am
Has thanked: 3 times
Been thanked: 91 times

Re: how to find which user deleted application plan

Postby poojithas » Sat Mar 29, 2014 4:55 am

Hi,
The question is if a user deletes a plan, does db2 writes this information in a Log ? If so, how to view that Log ?

I am alone DBA in this little organisation, appreciate help.
poojithas
 
Posts: 15
Joined: Sun May 05, 2013 7:11 am
Has thanked: 0 time
Been thanked: 0 time

Re: how to find which user deleted application plan

Postby dick scherrer » Sat Mar 29, 2014 8:44 pm

Hello,

The better question is why has that environment been allowed to get out of control. . . . And this should have attention.

As far as your question, I suspect the delete is recorded somewhere - personally, I've not deleted a plan.

Have you done as suggested and spoken with the security people?

But more serious (at least to me and other seniors), having an environment out of control should not be acceptable.
Hope this helps,
d.sch.
User avatar
dick scherrer
Global moderator
 
Posts: 6304
Joined: Sat Jun 09, 2007 8:58 am
Has thanked: 3 times
Been thanked: 91 times

Re: how to find which user deleted application plan

Postby poojithas » Tue Apr 01, 2014 7:26 pm

Hi,
After some investigation, I found that user has bindagent authorisation at system level, hence he is able to free plan. We have now, revoked that authorization.

If anyone knows how to find infromation in Logs, it would be really appreciatable.
poojithas
 
Posts: 15
Joined: Sun May 05, 2013 7:11 am
Has thanked: 0 time
Been thanked: 0 time


Return to DB2

 


  • Related topics
    Replies
    Views
    Last post