Auditing for New Objects (QCRTOBJAUD)
The Auditing for New Objects (QCRTOBJAUD) system value is used to determine the auditing value for a new object, if the create object auditing default for the library or directory of the new object is set to *SYSVAL.
The QCRTOBJAUD system value is also the default object auditing value for new folderless documents.
For example, the CRTOBJAUD value for the CUSTLIB library is *SYSVAL. The QCRTOBJAUD value is *CHANGE. If you create a new object in the CUSTLIB library, its object auditing value is automatically set to *CHANGE. You can change the object auditing value using the CHGOBJAUD or CHGAUD command.
| Value | Description |
|---|---|
| *NONE | No auditing is done for the object. |
| *NOTAVL | This value is displayed to indicate that the system value is not available to the user because the user does not have either *AUDIT or *ALLOBJ special authority. The system value cannot be set to this value. |
| *USRPRF | Auditing of the object is based on the value in the profile of the user accessing the object. |
| *CHANGE | An audit record is written whenever a security relevant change is made to the object. |
| *ALL | An audit record is written for any security relevant action that affects the contents of the object. An audit record is also written if a security relevant change is made to the object. |
Recommended value: The value you select depends on the auditing requirements of your installation. Planning the auditing of object access provides more information about methods for setting up object auditing on your system. You can control the auditing value at the directory level with the CRTOBJAUD parameter on the Make Directory (CRTDIR) command, and the *CRTOBJAUD value on the Change Attribute (CHGATR) command. You can also control the auditing value at the library level with the CRTOBJAUD parameter with the CRTLIB command and the CHGLIB command.