Page 1 of 1

how to find which user deleted application plan

PostPosted: Fri Mar 28, 2014 4:32 pm
by poojithas
Hi, One of our application plan is getting deleted frequently. We suspect some cranky user is doing this.
how to find which user is deleting the plan. Is this information can be found in Log files, if so, how to print that Log file.

Re: how to find which user deleted application plan

PostPosted: Fri Mar 28, 2014 4:56 pm
by NicC
try speaking to youir security guys - RACF, ACF, whatever.

If the person doing this should not be doing it then either the plan should be somewhere more secure or that person should have reduced access.

Re: how to find which user deleted application plan

PostPosted: Fri Mar 28, 2014 7:46 pm
by poojithas
I'm new to DBA job and finding this is on my shoulders, please help.

Re: how to find which user deleted application plan

PostPosted: Sat Mar 29, 2014 12:29 am
by dick scherrer
Hello,

Why is a user able to delete a plan? :? I have Never seen this allowed and i believe it should have been stopped before it ever happened :(

You need to review which permissions have been granted to people and why. And fix those that are not apprpopriate.

If there is another dba for some other project in your organization, you should talk with them.

Re: how to find which user deleted application plan

PostPosted: Sat Mar 29, 2014 4:55 am
by poojithas
Hi,
The question is if a user deletes a plan, does db2 writes this information in a Log ? If so, how to view that Log ?

I am alone DBA in this little organisation, appreciate help.

Re: how to find which user deleted application plan

PostPosted: Sat Mar 29, 2014 8:44 pm
by dick scherrer
Hello,

The better question is why has that environment been allowed to get out of control. . . . And this should have attention.

As far as your question, I suspect the delete is recorded somewhere - personally, I've not deleted a plan.

Have you done as suggested and spoken with the security people?

But more serious (at least to me and other seniors), having an environment out of control should not be acceptable.

Re: how to find which user deleted application plan

PostPosted: Tue Apr 01, 2014 7:26 pm
by poojithas
Hi,
After some investigation, I found that user has bindagent authorisation at system level, hence he is able to free plan. We have now, revoked that authorization.

If anyone knows how to find infromation in Logs, it would be really appreciatable.