USERID in Journal records

[ca.portal.admin]

Hello,

Does anyone have a work-around to get user id info off of the journals?
See below:

To accommodate Sarbanes-Oxley requirements, client would like to see the

userid associated with the run unit written out to the journals so they

can later use those journals to report on process performed by userid.
Currently there is no way to report on this information because the
journals to not contain userid associated with the run unit.

TIA.

Navid


The electronic mail message you have received and any files transmitted
with it are confidential and solely for the intended addressee(s)'s
attention. Do not divulge, copy, forward, or use the contents,
attachments, or information without permission of Fannie Mae.
Information contained in this message is provided solely for the purpose
stated in the message or its attachment(s) and must not be disclosed to
any third party or used for any other purpose without consent of Fannie
Mae. If you have received this message and/or any files transmitted
with it in error, please delete them from your system, destroy any hard
copies of them, and contact the sender.



"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
Re: USERID in Journal records
"Hi Navid,

We provide an EXIT for one of our products to create a ""USER"" record
in the Journal so that you have
such information. We could provide a free copy of the source if you
like. It is code for EXIT 14. We
have an eyecatch in it for our own use but you could change.

Drop me a note offline, and I will send the source and some instructions.

John

At 02:25 PM 10/31/2005, Ahrarian, Navid wrote:

Hello,
=20
Does anyone have a work-around to get user id info off of the journals?
See below:
=20
To accommodate Sarbanes-Oxley requirements, client would like to see the

userid associated with the run unit written out to the journals so they

can later use those journals to report on process performed by userid.=20
Currently there is no way to report on this information because the=20
journals to not contain userid associated with the run unit.
=20
TIA.
=20
Navid
=20

The electronic mail message you have received and any files transmitted

separate run-unit, that did an OBTAIN KEEP EXCLUSIVE, >with it are confidential and solely for the intended addressee(s)'s

attention. Do not divulge, copy, forward, or use the contents,
attachments, or information without permission of Fannie Mae.
Information contained in this message is provided solely for the purpose
stated in the message or its attachment(s) and must not be disclosed to
any third party or used for any other purpose without consent of Fannie
Mae. If you have received this message and/or any files transmitted
with it in error, please delete them from your system, destroy any hard
copies of them, and contact the sender. =20

=20

John Abell
International Software Products

This email may contain confidential and privileged material for the
sole use of the intended recipient(s). Any review, use, retention,
distribution or disclosure by others is strictly prohibited. If you
are not the intended recipient (or authorized to receive on behalf of
the named recipient), please contact the sender by reply email and
delete all copies of this message. Also, email is susceptible to data
corruption, interception, tampering, unauthorized amendment and
viruses. We only send and receive emails on the basis that we are not
liable for any such corruption, interception, tampering, amendment or
viruses or any consequence thereof.

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
Re: [IDMSVENDOR-L] USERID in Journal records
"many many 3rd-party software vendors market this kind of product - at
least one markets their product as a ""sarbanes-oxley"" solution for IDMS

or you might do some kind of task /transaction # match on the journal and
log fiels to apply user ids from the log to transactions from the journal

chris hoelscher

The information transmitted is intended only for the person or entity to which it is addressed and may contain CONFIDENTIAL material. If you receive this material/information in error, please contact the sender and delete or destroy the material/information.

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
USERID in Journal records
"Hello,

Does anyone have a work-around to get user id info off of the journals?
See below:

To accommodate Sarbanes-Oxley requirements, client would like to see the

userid associated with the run unit written out to the journals so they

can later use those journals to report on process performed by userid.
Currently there is no way to report on this information because the
journals to not contain userid associated with the run unit.

TIA.

Navid


The electronic mail message you have received and any files transmitted
with it are confidential and solely for the intended addressee(s)'s
attention. Do not divulge, copy, forward, or use the contents,
attachments, or information without permission of Fannie Mae.
Information contained in this message is provided solely for the purpose
stated in the message or its attachment(s) and must not be disclosed to
any third party or used for any other purpose without consent of Fannie
Mae. If you have received this message and/or any files transmitted
with it in error, please delete them from your system, destroy any hard
copies of them, and contact the sender.



"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
Advantage CA-ADS Introductory Overview Webcast
"Computer Associates is offering a free one hour webcast that is an introductory or refresher overview for anyone needing to create or modify applications using the Advantage(tm) CA-ADS for CA-IDMS family of tools.  The live webcast will be on Tuesday, November 8, 2005, at 10:00 AM EST.

To register for the webcast, please access http://www.thevoicethevoice.com/pizza/

This webcast is part of the ""Better Learning Through Pizza Mainframe Update Webcast"" program. CA will award one pizza to the referring party for every two people they recommend who attend the webinar. Guests must enter referral's name when registering and attend the webinar. CA employees and their families are not eligible. Prize is a coupon for a one-topping pizza from a national pizza chain (retail value $8 - $12). Winner will be notified by email.

DBAs, be sure to pass on this information to your application developers.

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
Advantage CA-ADS Introductory Overview Webcast
"
Computer Associates is offering a free one hour webcast that is an
introductory or refresher overview for anyone needing to create or modify
applications using the Advantage™ CA-ADS for CA-IDMS family of tools.  The
live webcast will be on Tuesday, November 8, 2005, at 10:00 AM EST.

To register for the webcast, please access
http://www.thevoicethevoice.com/pizza/

This webcast is part of the ""Better Learning Through Pizza Mainframe Update
Webcast"" program. CA will award one pizza to the referring party for every
two people they recommend who attend the webinar. Guests must enter
referral's name when registering and attend the webinar. CA employees and
their families are not eligible. Prize is a coupon for a one-topping pizza
from a national pizza chain (retail value $8 - $12). Winner will be
notified by email.

DBAs, be sure to pass on this information to your application developers.
"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
Re: IDMS Server question
"Hello Kay:

ARCH just had a client go live last week with 16.0 SP2 and all of a sudden
we were getting all kinds of DDS Snaps in the log for task CASERVER and program
CASERVER stalled waiting on PTERMS.

We resolved this issue by changing the Internal and external time out values
to 300 and the resource timeout to forever from the default sysgen values.

Once the system cycled, the next day we did not see any stalls waiting on
PTERMS or DDS Snaps in the log.

What had happened was that the values that we had established had been
replaced by the default sysgen values for the CASERVER task during the
installation of IDMS 16.0 SP2.

Bill Allen
ARCH Consulting Associates, Ltd.

In a message dated 11/1/2005 3:44:17 P.M. Eastern Standard Time,
[e-mail] writes:

Several times a day, we have IDMS Server tasks for web applications
abend with DC001003 - STALLED WAITING FOR PTERM. I have adjusted all
the timeout values according to CA's recommendations. From comparing
times on the various logs, it appears that the front end and back end
are both waiting for each other, until one or the other times out. This
occurs sporadically on multiple CV's, with multiple applications,
running on multiple web servers. Has anyone else had this problem?

Kay Rozeboom
State of Iowa
Information Technology Enterprise
Department of Administrative Services
Telephone: [phone] Fax: [phone]
Email: [e-mail]

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
IDMS Server question
"Several times a day, we have IDMS Server tasks for web applications
abend with DC001003 - STALLED WAITING FOR PTERM. I have adjusted all
the timeout values according to CA's recommendations. From comparing
times on the various logs, it appears that the front end and back end
are both waiting for each other, until one or the other times out. This
occurs sporadically on multiple CV's, with multiple applications,
running on multiple web servers. Has anyone else had this problem?

Kay Rozeboom
State of Iowa
Information Technology Enterprise
Department of Administrative Services
Telephone: [phone] Fax: [phone]
Email: [e-mail]

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
Re: How to punch all schemas ??????
"We have a library of signon and dictionary control cards. We concatenate
the appropriate member with the output from a previous step to build the
complete set of control cards.

Patricia Rathbone
University of New Mexico

At 11/01/2005 09:06 Tuesday, javier sotela wrote:

Hi Everyone:

We are trying to punch all schemas from a dictionary in two steps. The first
step just send all schemas to suspch verb punch, like this : Punch all
schemas as syn verb punch. The idea is that in the second step the utilitie
IDMSCHEM takes the schemas in syspch and punch to a file with syn. The
problem is that we can do this with modules using IDMSDDL and punching the
user information and the dictionary options across idd modules, using for
example PUNCH MODULE SIGNON-XXXX. The problem is that with IDMSCHEM there is
not valid option to use PUNCH MODULE SIGNON-***, then there is not the
option to send the signon information and the dictionary options to the
second step. Does anybody have a job with different steps to punch all
schemas and solve my problem ????

TIA.

Javier S.

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
Re: How to punch all schemas ??????
"What I do is that I punch the information to a temporary dataset.
Then in my second step ""in-line"" the syntax for punching the schemas.

FIRST Step
//SYSPCH DD DSN=&&TEMPDSN.......
//SYSIPT
PUNCH ALL SCHEMA AS SYN VERB PUN.

SECOND Step
//SYSIPT DD *
SIGNON ......
SET OPT DIS AS SYN WITHOUT ELE.
// DD DSN=&&TEMPDSN,DISP=PASS

I hope this helps.

Tommy Petersen




javier sotela
<jsotela@hotmail.
com> To
Sent by: IDMS [e-mail]
Public Discussion cc
Forum
<IDMS-L@LISTSERV. Subject
IUASSN.COM> How to punch all schemas ??????


11/01/2005 11:06
AM


Please respond to
IDMS Public
Discussion Forum
<IDMS-L@LISTSERV.
IUASSN.COM>






Hi Everyone:

We are trying to punch all schemas from a dictionary in two steps. The
first
step just send all schemas to suspch verb punch, like this : Punch all
schemas as syn verb punch. The idea is that in the second step the utilitie
IDMSCHEM takes the schemas in syspch and punch to a file with syn. The
problem is that we can do this with modules using IDMSDDL and punching the
user information and the dictionary options across idd modules, using for
example PUNCH MODULE SIGNON-XXXX. The problem is that with IDMSCHEM there
is
not valid option to use PUNCH MODULE SIGNON-***, then there is not the
option to send the signon information and the dictionary options to the
second step. Does anybody have a job with different steps to punch all
schemas and solve my problem ????

TIA.

Javier S.

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
Re: USERID in Journal records
"Hi Everyone!!!!

We open a DAR with this problem to CA some months ago. Althougth there is
some optios ,we are on VSE and there is not a good options to do that. And
on the other side, this is a market requerinment for database software ,if
CA understand one day that they have to put this feature in the base
software. They said that I was the second site that needs that, then we open
a DAR. I suggest to everybody to open a DAR with this requirenment, all
competitive database in the market provide this feature, why not IDMS ???

TIA.

J. Sotela

From: ""Ahrarian, Navid"" <[e-mail]>
Reply-To: IDMS Public Discussion Forum <[e-mail]>
To: [e-mail]
Subject: USERID in Journal records
Date: Mon, 31 Oct 2005 14:25:10 -0500

Hello,

Does anyone have a work-around to get user id info off of the journals?
See below:

To accommodate Sarbanes-Oxley requirements, client would like to see the

userid associated with the run unit written out to the journals so they

can later use those journals to report on process performed by userid.
Currently there is no way to report on this information because the
journals to not contain userid associated with the run unit.

TIA.

Navid


The electronic mail message you have received and any files transmitted
with it are confidential and solely for the intended addressee(s)'s
attention. Do not divulge, copy, forward, or use the contents,
attachments, or information without permission of Fannie Mae.
Information contained in this message is provided solely for the purpose
stated in the message or its attachment(s) and must not be disclosed to
any third party or used for any other purpose without consent of Fannie
Mae. If you have received this message and/or any files transmitted
with it in error, please delete them from your system, destroy any hard
copies of them, and contact the sender.

_________________________________________________________________
Don't just search. Find. Check out the new MSN Search!
http://search.msn.com/

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
How to punch all schemas ??????
"Hi Everyone:

We are trying to punch all schemas from a dictionary in two steps. The first
step just send all schemas to suspch verb punch, like this : Punch all
schemas as syn verb punch. The idea is that in the second step the utilitie
IDMSCHEM takes the schemas in syspch and punch to a file with syn. The
problem is that we can do this with modules using IDMSDDL and punching the
user information and the dictionary options across idd modules, using for
example PUNCH MODULE SIGNON-XXXX. The problem is that with IDMSCHEM there is
not valid option to use PUNCH MODULE SIGNON-***, then there is not the
option to send the signon information and the dictionary options to the
second step. Does anybody have a job with different steps to punch all
schemas and solve my problem ????

TIA.

Javier S.

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
IDMS16 - Security issue
"Hi all,

We are getting the following message:

+IDMS DB347012 Security violation using subschema IDMSSECU with dbname SYSUSER pgm ZDBAPSH1

1 - The IDMS startup JCL contains USER=XXXXX

2 - The program ZDBAPSH1 is submitted via dialog and it's seems that the message is related to the user.

3 - Such user has SYSADMIN profile and able to access SYSUSER segment

I can't figure out what's going on.

Any clue?

Thanks.

Marcelo Gaspar
Large Systems Database Software, LSDS
*(313)24-84634 * mailTo:[e-mail]
* mailTo:[e-mail]
Amagus Consulting at Ford Motor Co.

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
Re: DAR voting
"Chris,

I'll post the list later today.

Laura

Chris Wood wrote:

Laura,

For the benefit of non members would it be possible to see the list?

Thanks

Chris Wood
Alberta Department of Energy
CANADA

[ca.portal.admin]

Hi Everyone!!!!

We open a DAR with this problem to CA some months ago. Althougth there
is some optios ,we are on VSE and there is not a good options to do
that. And on the other side, this is a market requerinment for database
software ,if CA understand one day that they have to put this feature
in the base software. They said that I was the second site that needs
that, then we open a DAR. I suggest to everybody to open a DAR with this
requirenment, all competitive database in the market provide this
feature, why not IDMS ???

TIA.

J. Sotela

From: ""Ahrarian, Navid"" <[e-mail]>
Reply-To: IDMS Public Discussion Forum <[e-mail]>
To: [e-mail]
Subject: USERID in Journal records
Date: Mon, 31 Oct 2005 14:25:10 -0500

Hello,

Does anyone have a work-around to get user id info off of the journals?
See below:

To accommodate Sarbanes-Oxley requirements, client would like to see
the

userid associated with the run unit written out to the journals so
they

can later use those journals to report on process performed by

userid.

Currently there is no way to report on this information because the
journals to not contain userid associated with the run unit.

TIA.

Navid


The electronic mail message you have received and any files transmitted

with it are confidential and solely for the intended addressee(s)'s
attention. Do not divulge, copy, forward, or use the contents,
attachments, or information without permission of Fannie Mae.
Information contained in this message is provided solely for the
purpose stated in the message or its attachment(s) and must not be
disclosed to any third party or used for any other purpose without
consent of Fannie Mae. If you have received this message and/or any
files transmitted with it in error, please delete them from your
system, destroy any hard copies of them, and contact the sender.

_________________________________________________________________
Don't just search. Find. Check out the new MSN Search!
http://search.msn.com/

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
Re: USERID in Journal records
"I put in a suggestion for the same thing. I was surprised that it
wasn't on the IUA's list of DARS just published. That I should have to
buy additional software to accomplish this is unacceptable.
HBCanon
Lockheed-Martin

[ca.portal.admin]

Hi Everyone!!!!

We open a DAR with this problem to CA some months ago. Althougth there
is some optios ,we are on VSE and there is not a good options to do
that. And on the other side, this is a market requerinment for database
software ,if CA understand one day that they have to put this feature
in the base software. They said that I was the second site that needs
that, then we open a DAR. I suggest to everybody to open a DAR with this
requirenment, all competitive database in the market provide this
feature, why not IDMS ???

TIA.

J. Sotela

From: ""Ahrarian, Navid"" <[e-mail]>
Reply-To: IDMS Public Discussion Forum <[e-mail]>
To: [e-mail]
Subject: USERID in Journal records
Date: Mon, 31 Oct 2005 14:25:10 -0500

Hello,

Does anyone have a work-around to get user id info off of the journals?
See below:

To accommodate Sarbanes-Oxley requirements, client would like to see
the

userid associated with the run unit written out to the journals so
they

can later use those journals to report on process performed by

userid.

Currently there is no way to report on this information because the
journals to not contain userid associated with the run unit.

TIA.

Navid


The electronic mail message you have received and any files transmitted

with it are confidential and solely for the intended addressee(s)'s
attention. Do not divulge, copy, forward, or use the contents,
attachments, or information without permission of Fannie Mae.
Information contained in this message is provided solely for the
purpose stated in the message or its attachment(s) and must not be
disclosed to any third party or used for any other purpose without
consent of Fannie Mae. If you have received this message and/or any
files transmitted with it in error, please delete them from your
system, destroy any hard copies of them, and contact the sender.

_________________________________________________________________
Don't just search. Find. Check out the new MSN Search!
http://search.msn.com/

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
replication DB2 to IDMS
"I have seen information about products that can read the IDMS journal and
be used to update a DB2 database to keep the two in sync. Has anybody
heard of a product that works the other way and reads the DB2 log and
updates a related IDMS database. A former client of mine is converting
from IDMS to DB2 and is asking whether or not it would be possible to do
this for 'a while' just in case there are DB2 problems.

Since it is uncool to discuss products like this on the list, please reply
offline to [e-mail] with either your experiences doing something
like this or, if you are a vendor, your product information.

John Wheeler
Back home again in Carolina



__________________________________
Yahoo! FareChase: Search multiple travel sites in one click.
http://farechase.yahoo.com

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
utilization pricing vs. capacity pricing?
"from the most recent e-news IDMS


On June 14, 2005, CA introduced Measured Workload Pricing for customers
running the z/VSE and VSE/ESA operating systems. Measured Workload Pricing
bases licensing costs on measured system usage - rather than total
potential hardware capacity - enabling customers to more closely align IT
spending with changing business requirements. Customers can establish
licensing costs based on measured levels of usage, enabling them to
flexibly increase usage as needed to support growing demand. Measured
Workload Pricing is based on utilization metrics generated by performance
measurement or resource accounting software pre-certified by CA.

A customer with 60 MIPS on a zSeries processor running z/VSE or VSE/ESA,
for example, may only be utilizing the machine at 50 percent capacity -
with the balance held in reserve for future business growth or periods of
peak demand. Under CA's Measured Workload Pricing model, license costs are
based on the actual capacity used. Customers can reserve the ability to
leverage the full power of the mainframe until needed.
-------------------------------------------------

how will this affect how IDMS systems are fine-tuned? will anyone be asked
to tune the SYSGEN or DMCL so that less CPU is used, now that lower CPU
usage could have an immediate bottom line impact?

chris ""out-of-tune"" hoelscher


The information transmitted is intended only for the person or entity to which it is addressed and may contain CONFIDENTIAL material. If you receive this material/information in error, please contact the sender and delete or destroy the material/information.

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
Daylight saving changes in IDMS 15.0
"We ran a JREPORT and found out that the wrong time was reported.

From CA we got a reference to QI37164, as the way to implement daylight saving
has changed in IDMS 15.0 (and in IDMS 16.0)

For all who didn't reformat the JOURNAL-files and the DCLOG-files on 30th
October 2005, they should check QI37164 as they could get the same problems.

This might even effect rollback/rollworward by hand, but that isn't checked for
now.


Regards,

J.W.M. Hauben
System Programmer
Platform Mainframe
T-Systems
Address: Spoorsingel 61, NL-6412 AA Heerlen (L)
P.O.Box 2814, NL-6401 DH Heerlen (L)
Phone: [phone]
Fax: [phone]
Mobile:
E-Mail: [e-mail]
Internet: http://www.T-Systems.nl

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
Re: [IDMSVENDOR-L] Daylight saving changes in IDMS 15.0
"For all who didn't reformat the JOURNAL-files and the DCLOG-files on 30th
October 2005, they should check QI37164 as they could get the same
problems.


however, if your CV was down for over 1 hour, there should be no problems
and no need to panic! (as has always been the case)

chris ""been sent to time-out"" hoelscher


The information transmitted is intended only for the person or entity to which it is addressed and may contain CONFIDENTIAL material. If you receive this material/information in error, please contact the sender and delete or destroy the material/information.

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
HIPAA audit trails
"At our site, we deal with confidential information that is covered by the
HIPAA regulations. One of the security rules requires us to have an audit
trail of database access. We track updates through our journals and use
PERFMON reports to track user activity. For example we can use PERFMON
reports that will tell us User XYZ used dialog 123 at 1:30 pm on 11/11/05.
What we want to do now is expand our auditing capabilities so that we can
tell what the user looked at. We want to be able to do is generate a report
that will tell us that user XYZ used dialog 123 at 1:30 pm on 11/11/05 and
pulled up information on XXXXX.

I am by no means an expert on PERFMON or CULPRIT so from limited knowledge
it seems to me that what we want goes beyond the capabilities of standard
PERFMON reports. My first question is who else out there has addressed
auditing in regards to the HIPAA security rules and what was your solution?
The second question is has anyone attempted to do what I discussed? If so
how did you accomplish it?

Any help on this would be greatly appreciated, Thanks!


Steven C. Blackburn
Database Administrator
Information Systems Development
[e-mail]
[phone]
Confidentiality Notice:
This e-mail, and any attachments thereto, is intended only for use by the
addressee(s) named herein and may contain privileged and/or confidential
information. If you are not the intended recipient of this e-mail, any
dissemination, distribution or copying of this e-mail, and any attachments
thereto, is strictly prohibited. If you have received this e-mail in error,
please immediately notify the sender by e-mail or telephone and permanently
delete all copies of this e-mail and any attachments.

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
Re: HIPAA audit trails
"We had a problem around here years ago where someone was looking at salaries
and making a deal over what people were being paid. To track what employee
a user was looking at, we added a routine that would write out a queue
record showing function name and emplyee id. Since we had a common routine
that was used to obtain a employee, we only had one place to change. This
queue was read nightly and a report was sent to the Internal Auditors
showing who looked at who.
This was only added to ADS dialogs. We limited signon to the subschema to
only those that worked on that system. I know that there were probably
other ways for people to look at this information. But, once word traveled
through the grapevine about this report, our problem went into ""hiding"".


Randy Bunton
Database Administrator
Charleston Commissioners of Public Works

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
Re: [IDMSVENDOR-L] HIPAA audit trails
"Steve, nothing in native IDMS does what you want - only update DML is
recorded in the journals, so if you really want to record ALL activities
for a given user or a given transaction, I would consider the following
options:

i am not sure of any of these - just off the top of my head:

1) database procedures attached to (AFTER GET) on the selected records -
the attached program could do a write journal with user information
2) modify the appropriate dialogs to perform WRITE JOURNAL commands with
user information




Hope this helps
Chris ""zoo keeper of the HIPPA-potamuses"" Hoelscher
IDMS & DB2 Database Administrator
Humana Inc
502-580-2538
[e-mail]




The information transmitted is intended only for the person or entity to which it is addressed and may contain CONFIDENTIAL material. If you receive this material/information in error, please contact the sender and delete or destroy the material/information.

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
Re: HIPAA audit trails
"Steve:

Somebody wrote about audit database access a few days ago. There is some
problems involved with you requerinments, the first thing is that IDMS never
record user information in the journals, then you never have user
information related to database modifications. This is a SOX law
requerinment and CA says that there is a third party software that can help
you with that. I disagrre with CA and I pen a DAR requiring user information
in the journals. I suggest that you open a DAR too, in the market any
databse product provides an Audit option to do something like that, why not
IDMS ??? .
The second thing in your case is how the dialogs are open areas in your
database and what if only retrieval and there is not modifications. There is
two options that we analize, the first one is database procedures according
to your needs in terms of records to audit. The second option, that we
choose because we can do something like that, is create an audit process
that is called in the application that record in a database record every
access to our sensitive information. You can choose this option if you can
identify easily in terms of ypur application the sensitive information.

Hope this helps.

Javier S.

From: Steve Blackburn <[e-mail]>
Reply-To: IDMS Public Discussion Forum <[e-mail]>
To: [e-mail]
Subject: HIPAA audit trails
Date: Fri, 11 Nov 2005 10:31:36 -0500

At our site, we deal with confidential information that is covered by the
HIPAA regulations. One of the security rules requires us to have an audit
trail of database access. We track updates through our journals and use
PERFMON reports to track user activity. For example we can use PERFMON
reports that will tell us User XYZ used dialog 123 at 1:30 pm on 11/11/05.
What we want to do now is expand our auditing capabilities so that we can
tell what the user looked at. We want to be able to do is generate a report
that will tell us that user XYZ used dialog 123 at 1:30 pm on 11/11/05 and
pulled up information on XXXXX.

I am by no means an expert on PERFMON or CULPRIT so from limited knowledge
it seems to me that what we want goes beyond the capabilities of standard
PERFMON reports. My first question is who else out there has addressed
auditing in regards to the HIPAA security rules and what was your solution?
The second question is has anyone attempted to do what I discussed? If so
how did you accomplish it?

Any help on this would be greatly appreciated, Thanks!


Steven C. Blackburn
Database Administrator
Information Systems Development
[e-mail]
[phone]
Confidentiality Notice:
This e-mail, and any attachments thereto, is intended only for use by the
addressee(s) named herein and may contain privileged and/or confidential
information. If you are not the intended recipient of this e-mail, any
dissemination, distribution or copying of this e-mail, and any attachments
thereto, is strictly prohibited. If you have received this e-mail in error,
please immediately notify the sender by e-mail or telephone and permanently
delete all copies of this e-mail and any attachments.

_________________________________________________________________
Don't just search. Find. Check out the new MSN Search!
http://search.msn.click-url.com/go/onm00200636ave/direct/01/

"
IDMS Public Discussion Forum
[e-mail]
SMTP
[e-mail]
[e-mail]
SMTP








Normal

Normal
Re: User Exit 2
"Marcelo -

Do not code EP=UXITEP1 on the #DEFXIT statement.
That entry point belongs to RHDCUXIT, not your exit.
Your link-edit statements are correct.

The linkage editor is saying it can't find DCEXIT02 in the DDNAME called
OBJLIB.
Check to make sure your concatenation includes the objlib/loadlib where
member DCEXIT02 can be found.

Also, your statements assume that member name and entry point name are the
same....DCEXIT02, is that correct?
If not, 'INCLUDE OBJLIB' needs to be the name of the member and 'EP=' needs
to be the entry point where your program expects to receive control, which
could be a different name.

Good Luck.
Jon Gocher

[ca.portal.admin]

I put in a suggestion for the same thing. I was surprised that it
wasn't on the IUA's list of DARS just published. That I should have to
buy additional software to accomplish this is unacceptable.
HBCanon
Lockheed-Martin