297 lines
12 KiB
HTML
297 lines
12 KiB
HTML
|
|
||
|
|
<!doctype html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||
|
|
<html>
|
||
|
|
<head><META http-equiv="Content-Type" content="text/html; charset=utf-8">
|
||
|
|
<title>Change Object Auditing (CHGOBJAUD)</title>
|
||
|
|
<link rel="stylesheet" type="text/css" href="../rzahg/ic.css">
|
||
|
|
</head>
|
||
|
|
<body bgcolor="white">
|
||
|
|
<script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<a name="CHGOBJAUD.Top_Of_Page"></a>
|
||
|
|
<h2>Change Object Auditing (CHGOBJAUD)</h2>
|
||
|
|
<table width="100%">
|
||
|
|
<tr>
|
||
|
|
<td valign="top" align="left"><b>Where allowed to run: </b>All environments (*ALL)<br>
|
||
|
|
<b>Threadsafe: </b>No
|
||
|
|
</td>
|
||
|
|
<td valign="top" align="right">
|
||
|
|
<a href="#CHGOBJAUD.PARAMETERS.TABLE">Parameters</a><br>
|
||
|
|
<a href="#CHGOBJAUD.COMMAND.EXAMPLES">Examples</a><br>
|
||
|
|
<a href="#CHGOBJAUD.ERROR.MESSAGES">Error messages</a></td>
|
||
|
|
</tr>
|
||
|
|
</table>
|
||
|
|
|
||
|
|
<div> <a name="CHGOBJAUD"></a>
|
||
|
|
<p>The Change Object Auditing (CHGOBJAUD) command allows users with *AUDIT special authority to set up or change auditing on an object. Users with *AUDIT special authority can turn auditing on or off for an object regardless of whether they have authority to the object. The system value QAUDCTL controls turning auditing on and off. The auditing attribute of an object can be displayed with the Display Object Description (DSPOBJD) command.
|
||
|
|
</p>
|
||
|
|
</div>
|
||
|
|
<table width="100%">
|
||
|
|
<tr><td align="right"><a href="#CHGOBJAUD.Top_Of_Page">Top</a></td></tr>
|
||
|
|
</table>
|
||
|
|
<hr size="2" width="100%">
|
||
|
|
|
||
|
|
<div>
|
||
|
|
<h3><a name="CHGOBJAUD.PARAMETERS.TABLE">Parameters</a></h3>
|
||
|
|
<table border="1" cellpadding="4" cellspacing="0">
|
||
|
|
<!-- col1="10" col2="15" col3="30" col4="10" -->
|
||
|
|
<tr>
|
||
|
|
<th bgcolor="aqua" valign="bottom" align="left">Keyword</th>
|
||
|
|
<th bgcolor="aqua" valign="bottom" align="left">Description</th>
|
||
|
|
<th bgcolor="aqua" valign="bottom" align="left">Choices</th>
|
||
|
|
<th bgcolor="aqua" valign="bottom" align="left">Notes</th>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td valign="top" rowspan="3"><a href="#CHGOBJAUD.OBJ"><b>OBJ</b></a></td>
|
||
|
|
<td valign="top">Object</td>
|
||
|
|
<td valign="top"><i>Qualified object name</i></td>
|
||
|
|
<td valign="top" rowspan="3">Required, Positional 1</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td valign="top">Qualifier 1: Object</td>
|
||
|
|
<td valign="top"><i>Generic name, name</i>, *ALL</td>
|
||
|
|
</tr><tr>
|
||
|
|
<td valign="top">Qualifier 2: Library</td>
|
||
|
|
<td valign="top"><i>Name</i>, <b><u>*LIBL</u></b>, *USRLIBL, *CURLIB, *ALL, *ALLUSR, *ALLAVL, *ALLUSRAVL</td>
|
||
|
|
</tr><tr>
|
||
|
|
<td valign="top"><a href="#CHGOBJAUD.OBJTYPE"><b>OBJTYPE</b></a></td>
|
||
|
|
<td valign="top">Object type</td>
|
||
|
|
<td valign="top">*ALL, *ALRTBL, *AUTHLR, *AUTL, *BNDDIR, *CFGL, *CHTFMT, *CLD, *CLS, *CMD, *CNNL, *COSD, *CRG, *CRQD, *CSI, *CSPMAP, *CSPTBL, *CTLD, *DEVD, *DSTMF, *DTAARA, *DTADCT, *DTAQ, *EDTD, *EXITRG, *FCT, *FILE, *FNTRSC, *FNTTBL, *FORMDF, *FTR, *GSS, *IGCDCT, *IGCTBL, *IGCSRT, *IMGCLG, *IPXD, *JOBD, *JOBQ, *JOBSCD, *JRN, *JRNRCV, *LIB, *LIND, *LOCALE, *M36, *M36CFG, *MEDDFN, *MENU, *MGTCOL, *MODD, *MODULE, *MSGF, *MSGQ, *NODGRP, *NODL, *NTBD, *NWID, *NWSCFG, *NWSD, *OUTQ, *OVL, *PAGDFN, *PAGSEG, *PDFMAP, *PDG, *PGM, *PNLGRP, *PRDAVL, *PRDDFN, *PRDLOD, *PSFCFG, *QMFORM, *QMQRY, *QRYDFN, *RCT, *S36, *SBSD, *SCHIDX, *SPADCT, *SQLPKG, *SQLUDT, *SRVPGM, *SSND, *SVRSTG, *TBL, *TIMZON, *USRIDX, *USRPRF, *USRQ, *USRSPC, *VLDL, *WSCST</td>
|
||
|
|
<td valign="top">Required, Positional 2</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td valign="top"><a href="#CHGOBJAUD.ASPDEV"><b>ASPDEV</b></a></td>
|
||
|
|
<td valign="top">ASP device</td>
|
||
|
|
<td valign="top"><i>Name</i>, <b><u>*</u></b>, *SYSBAS</td>
|
||
|
|
<td valign="top">Optional</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td valign="top"><a href="#CHGOBJAUD.OBJAUD"><b>OBJAUD</b></a></td>
|
||
|
|
<td valign="top">Object auditing value</td>
|
||
|
|
<td valign="top">*NONE, *USRPRF, *CHANGE, *ALL</td>
|
||
|
|
<td valign="top">Required, Positional 3</td>
|
||
|
|
</tr>
|
||
|
|
</table>
|
||
|
|
|
||
|
|
<table width="100%">
|
||
|
|
<tr><td align="right"><a href="#CHGOBJAUD.Top_Of_Page">Top</a></td></tr>
|
||
|
|
</table>
|
||
|
|
</div>
|
||
|
|
<div> <a name="CHGOBJAUD.OBJ"></a>
|
||
|
|
<h3>Object (OBJ)</h3>
|
||
|
|
<p>Specifies the objects for which auditing values are to be changed.
|
||
|
|
</p>
|
||
|
|
<p>This is a required parameter.
|
||
|
|
</p>
|
||
|
|
<p><b>Qualifier 1: Object</b>
|
||
|
|
</p>
|
||
|
|
<dl>
|
||
|
|
<dt><b>*ALL</b></dt>
|
||
|
|
<dd>All objects that have the specified object type are changed.
|
||
|
|
</dd>
|
||
|
|
<dt><b><i>generic-name</i></b></dt>
|
||
|
|
<dd>Specify the generic name of the objects for which auditing values are to be changed.
|
||
|
|
<p>A generic name is a character string of one or more characters followed by an asterisk (*); for example ABC*. The asterisk substitutes for any valid characters. A generic name specifies all objects with names that begin with the generic prefix for which the user has authority. If an asterisk is not included with the generic (prefix) name, the system assumes it to be the complete object name.
|
||
|
|
</p>
|
||
|
|
</dd>
|
||
|
|
<dt><b><i>name</i></b></dt>
|
||
|
|
<dd>Specify the name of the object for which auditing values are to be changed. When multiple libraries are searched, multiple objects can be changed only if *ALL, *ALLUSR, *ALLAVL, or *ALLUSRAVL is specified for the library qualifier.
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
<p><b>Qualifier 2: Library</b>
|
||
|
|
</p>
|
||
|
|
<dl>
|
||
|
|
<dt><b><u>*LIBL</u></b></dt>
|
||
|
|
<dd>All libraries in the library list for the current thread are searched until the first match is found.
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
<dl>
|
||
|
|
<dt><b>*CURLIB</b></dt>
|
||
|
|
<dd>The current library for the thread is searched. If no library is specified as the current library for the thread, the QGPL library is searched. If the <b>ASP device (ASPDEV)</b> parameter is specified when this value is used, ASPDEV(*) is the only valid value.
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
<dl>
|
||
|
|
<dt><b>*USRLIBL</b></dt>
|
||
|
|
<dd>If a current library entry exists in the library list for the current thread, the current library and the libraries in the user portion of the library list are searched. If there is no current library entry, only the libraries in the user portion of the library list are searched. If the <b>ASP device (ASPDEV)</b> parameter is specified when this value is used, ASPDEV(*) is the only valid value.
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
<dl>
|
||
|
|
<dt><b>*ALL</b></dt>
|
||
|
|
<dd>All the libraries in the auxiliary storage pools (ASPs) specified for the <b>ASP device (ASPDEV)</b> parameter are searched.
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
<dl>
|
||
|
|
<dt><b>*ALLUSR</b></dt>
|
||
|
|
<dd>All user libraries in the auxiliary storage pools (ASPs) defined by the <b>ASP device (ASPDEV)</b> parameter are searched.
|
||
|
|
<p>User libraries are all libraries with names that do not begin with the letter Q except for the following:
|
||
|
|
</p>
|
||
|
|
<p>
|
||
|
|
<pre>
|
||
|
|
#CGULIB #DSULIB #SEULIB
|
||
|
|
#COBLIB #RPGLIB
|
||
|
|
#DFULIB #SDALIB
|
||
|
|
</pre>
|
||
|
|
</p>
|
||
|
|
<p>Although the following libraries with names that begin with the letter Q are provided by IBM, they typically contain user data that changes frequently. Therefore, these libraries are also considered user libraries:
|
||
|
|
</p>
|
||
|
|
<p>
|
||
|
|
<pre>
|
||
|
|
QDSNX QRCLxxxxx QUSRIJS QUSRVxRxMx
|
||
|
|
QGPL QSRVAGT QUSRINFSKR
|
||
|
|
QGPL38 QSYS2 QUSRNOTES
|
||
|
|
QMGTC QSYS2xxxxx QUSROND
|
||
|
|
QMGTC2 QS36F QUSRPOSGS
|
||
|
|
QMPGDATA QUSER38 QUSRPOSSA
|
||
|
|
QMQMDATA QUSRADSM QUSRPYMSVR
|
||
|
|
QMQMPROC QUSRBRM QUSRRDARS
|
||
|
|
QPFRDATA QUSRDIRCL QUSRSYS
|
||
|
|
QRCL QUSRDIRDB QUSRVI
|
||
|
|
</pre>
|
||
|
|
</p>
|
||
|
|
<ol>
|
||
|
|
<li>'xxxxx' is the number of a primary auxiliary storage pool (ASP).
|
||
|
|
</li>
|
||
|
|
<li>A different library name, in the format QUSRVxRxMx, can be created by the user for each previous release supported by IBM to contain any user commands to be compiled in a CL program for the previous release. For the QUSRVxRxMx user library, VxRxMx is the version, release, and modification level of a previous release that IBM continues to support.
|
||
|
|
</li>
|
||
|
|
</ol>
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
<dl>
|
||
|
|
<dt><b>*ALLAVL</b></dt>
|
||
|
|
<dd>All libraries in all available ASPs are searched.
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
<dl>
|
||
|
|
<dt><b>*ALLUSRAVL</b></dt>
|
||
|
|
<dd>All user libraries in all available ASPs are searched. Refer to *ALLUSR for a definition of user libraries.
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
<dl>
|
||
|
|
<dt><b><i>name</i></b></dt>
|
||
|
|
<dd>Specify the name of the library to be searched.
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
</div>
|
||
|
|
<table width="100%">
|
||
|
|
<tr><td align="right"><a href="#CHGOBJAUD.Top_Of_Page">Top</a></td></tr>
|
||
|
|
</table>
|
||
|
|
<div> <a name="CHGOBJAUD.OBJTYPE"></a>
|
||
|
|
<h3>Object type (OBJTYPE)</h3>
|
||
|
|
<p>Specifies the object type of the objects to be changed. For more information, refer to the OBJTYPE parameter description in "Commonly used parameters: Expanded descriptions" in CL concepts and reference topic in the iSeries Information Center at http://www.ibm.com/eserver/iseries/infocenter.
|
||
|
|
</p>
|
||
|
|
<p>This is a required parameter.
|
||
|
|
</p>
|
||
|
|
<dl>
|
||
|
|
<dt><b>*ALL</b></dt>
|
||
|
|
<dd>All object types are changed that have the specified object name.
|
||
|
|
</dd>
|
||
|
|
<dt><b><i>object-type</i></b></dt>
|
||
|
|
<dd>Specify the object type of the objects for which auditing values are to be changed.
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
</div>
|
||
|
|
<table width="100%">
|
||
|
|
<tr><td align="right"><a href="#CHGOBJAUD.Top_Of_Page">Top</a></td></tr>
|
||
|
|
</table>
|
||
|
|
<div> <a name="CHGOBJAUD.ASPDEV"></a>
|
||
|
|
<h3>ASP device (ASPDEV)</h3>
|
||
|
|
<p>Specifies the auxiliary storage pool (ASP) device name where the library that contains the object (OBJ parameter) is located. If the object's library resides in an ASP that is not part of the library name space associated with the job, this parameter must be specified to ensure the correct object is used as the target of this command's operation.
|
||
|
|
</p>
|
||
|
|
<dl>
|
||
|
|
<dt><b>*</b></dt>
|
||
|
|
<dd>The ASPs that are currently part of the job's library name space will be searched to locate the object. This includes the system ASP (ASP number 1), all defined basic user ASPs (ASP numbers 2-32), and, if the job has an ASP group, all independent ASPs in the ASP group.
|
||
|
|
</dd>
|
||
|
|
<dt><b>*SYSBAS</b></dt>
|
||
|
|
<dd>The system ASP and all basic user ASPs will be searched to locate the object. No independent ASPs will be searched, even if the job has an ASP group.
|
||
|
|
</dd>
|
||
|
|
<dt><b><i>name</i></b></dt>
|
||
|
|
<dd>Specify the device name of the independent ASP to be searched to locate the object. The independent ASP must have been activated (by varying on the ASP device) and have a status of AVAILABLE. The system ASP and basic user ASPs will not be searched.
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
</div>
|
||
|
|
<table width="100%">
|
||
|
|
<tr><td align="right"><a href="#CHGOBJAUD.Top_Of_Page">Top</a></td></tr>
|
||
|
|
</table>
|
||
|
|
<div> <a name="CHGOBJAUD.OBJAUD"></a>
|
||
|
|
<h3>Object auditing value (OBJAUD)</h3>
|
||
|
|
<p>Specifies the object auditing value to associate with the object.
|
||
|
|
</p>
|
||
|
|
<p>This is a required parameter.
|
||
|
|
</p>
|
||
|
|
<dl>
|
||
|
|
<dt><b>*NONE</b></dt>
|
||
|
|
<dd>Using or changing this object does not cause an audit entry to be sent to the security journal.
|
||
|
|
</dd>
|
||
|
|
<dt><b>*USRPRF</b></dt>
|
||
|
|
<dd>The user profile of the user accessing this object is used to determine if an audit record is be sent for this access. The OBJAUD keyword of the CHGUSRAUD command is used to turn auditing on for a specific user.
|
||
|
|
</dd>
|
||
|
|
<dt><b>*CHANGE</b></dt>
|
||
|
|
<dd>All change accesses to this object by all users are logged.
|
||
|
|
</dd>
|
||
|
|
<dt><b>*ALL</b></dt>
|
||
|
|
<dd>All change or read accesses to this object by all users are logged.
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
</div>
|
||
|
|
<table width="100%">
|
||
|
|
<tr><td align="right"><a href="#CHGOBJAUD.Top_Of_Page">Top</a></td></tr>
|
||
|
|
</table>
|
||
|
|
<hr size="2" width="100%">
|
||
|
|
<div><h3><a name="CHGOBJAUD.COMMAND.EXAMPLES">Examples</a> </h3>
|
||
|
|
<p>
|
||
|
|
<pre>
|
||
|
|
CHGOBJAUD OBJ(PAYROLL/PAYFILE) OBJTYPE(*FILE)
|
||
|
|
OBJAUD(*CHANGE)
|
||
|
|
</pre>
|
||
|
|
</p>
|
||
|
|
<p>This command changes the object auditing value of the PAYFILE object in the PAYROLL library that has an object type *FILE. The auditing value of the PAYFILE file is changed so that changes to the file by any user is logged to the auditing journal QAUDJRN in QSYS.
|
||
|
|
</p>
|
||
|
|
</div>
|
||
|
|
<table width="100%">
|
||
|
|
<tr><td align="right"><a href="#CHGOBJAUD.Top_Of_Page">Top</a></td></tr>
|
||
|
|
</table>
|
||
|
|
<hr size="2" width="100%">
|
||
|
|
<div><h3><a name="CHGOBJAUD.ERROR.MESSAGES">Error messages</a> </h3>
|
||
|
|
<p><b><u>*ESCAPE Messages</u></b>
|
||
|
|
</p>
|
||
|
|
<dl>
|
||
|
|
<dt><b>CPF2208</b></dt>
|
||
|
|
<dd>Object &1 in library &3 type *&2 not found.
|
||
|
|
</dd>
|
||
|
|
<dt><b>CPF22B0</b></dt>
|
||
|
|
<dd>Not authorized to change the auditing value.
|
||
|
|
</dd>
|
||
|
|
<dt><b>CPF22CB</b></dt>
|
||
|
|
<dd>Auditing value not changed for some objects.
|
||
|
|
</dd>
|
||
|
|
<dt><b>CPF22FE</b></dt>
|
||
|
|
<dd>Audit value may not have been changed for object &1 in &3 type *&2.
|
||
|
|
</dd>
|
||
|
|
<dt><b>CPF9801</b></dt>
|
||
|
|
<dd>Object &2 in library &3 not found.
|
||
|
|
</dd>
|
||
|
|
<dt><b>CPF9803</b></dt>
|
||
|
|
<dd>Cannot allocate object &2 in library &3.
|
||
|
|
</dd>
|
||
|
|
<dt><b>CPF980B</b></dt>
|
||
|
|
<dd>Object &1 in library &2 not available.
|
||
|
|
</dd>
|
||
|
|
<dt><b>CPF9810</b></dt>
|
||
|
|
<dd>Library &1 not found.
|
||
|
|
</dd>
|
||
|
|
<dt><b>CPF9814</b></dt>
|
||
|
|
<dd>Device &1 not found.
|
||
|
|
</dd>
|
||
|
|
<dt><b>CPF9873</b></dt>
|
||
|
|
<dd>ASP status is preventing access to object.
|
||
|
|
</dd>
|
||
|
|
<dt><b>CPF98A1</b></dt>
|
||
|
|
<dd>Cannot find object to match specified name.
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
</div>
|
||
|
|
<table width="100%">
|
||
|
|
<tr><td align="right"><a href="#CHGOBJAUD.Top_Of_Page">Top</a></td></tr>
|
||
|
|
</table>
|
||
|
|
</body>
|
||
|
|
</html>
|