A security issue

[kumarmdb2]

Hi... We are trying to find a way by which we can capture the OS id of the user performing the updates on the. Can it be done through the database?

We had an issue that someone deleted one of the important data in our environment (Window 2003 server & DB2 V9 fix pak 3) but our logs only showed the id by which the DB was logged into by (We have given same id to every one as it is a development environment) and otherwise also all the apps running on it have a same id.

So, is there any way to do that??? (Maybe some column of syscat table)

[docdiesel]

Hi,

if you gave the same DB2 logon id to the whole team, there's little help. Maybe, if diag level ist right, that there's logon information in your db2diag.log with TCP/IP source address. Or have a look into the window$ event logs. Anyway, you'll need to know when the data was deleted.

For future purposes, GRANT rights to groups and add the window$ users to them. That way you can get people to having to use their own user/passwd.

Regards,

Bernd