CA (Authority Changes) journal entries

This table provides the format of the CA (Authority Changes) journal entries.

Start of changeInformation from this audit journal entry can be queried with the SYSTOOLS.AUDIT_JOURNAL_CA table function: AUDIT_JOURNAL_CAEnd of change

Table 1. CA (Authority Changes) journal entries. QASYCAJE/J4/J5 Field Description File
Offset Field Format Description
JE J4 J5
1 1 1     Heading fields common to all entry types. See Standard heading fields for audit journal entries QJORDJE5 Record Format (*TYPE5),Standard heading fields for audit journal entries QJORDJE4 Record Format (*TYPE4), and Standard heading fields for audit journal entries QJORDJE2 Record Format (*TYPE2) for field listing.
156 224 610 Entry Type Char(1) The type of entry.
A
Changes to authority
157 225 611 Object Name Char(10) The name of the object.
167 235 621 Library Name Char(10) The name of the library where the object is stored.
177 245 631 Object Type Char(8) The type of object.
185 253 639 User Name Char(10) The name of the user profile whose authority is being granted or revoked.
195 263 649 Authorization List Name Char(10) The name of the authorization list.
          Authorities granted or removed:
205 273 659 Object Existence Char(1)
Y
*OBJEXIST
206 274 660 Object Management Char(1)
Y
*OBJMGT
207 275 661 Object Operational Char(1)
Y
*OBJOPR
208 276 662 Authorization List Management Char(1)
Y
*AUTLMGT
209 277 663 Authorization List Char(1)
Y
*AUTL public authority
210 278 664 Read Authority Char(1)
Y
*READ
211 279 665 Add Authority Char(1)
Y
*ADD
212 280 666 Update Authority Char(1)
Y
*UPD
213 281 667 Delete Authority Char(1)
Y
*DLT
214 282 668 Exclude Authority Char(1)
Y
*EXCLUDE
215 283 669 Execute Authority Char(1)
Y
*EXECUTE
216 284 670 Object Alter Authority Char(1)
Y
*OBJALTER
217 285 671 Object Reference Authority Char(1)
Y
*OBJREF
218 286 672 (Reserved Area) Char(4)  
222 290 676 Command Type Char(3) The type of command used.
GRT
Grant
RPL
Grant with replace
RVK
Revoke
USR
GRTUSRAUT operation
225 293 679 Field name Char(10) The name of the field.
235 303   (Reserved Area) Char(10)  
    689 Object Attribute Char(10) The attribute of the object.
245 313 699 Office User Char(10) The name of the office user.
255 323 709 DLO Name Char(12) The name of the DLO.
267 335 721 (Reserved Area) Char(8)  
275 343 729 Folder Path Char(63) The path of the folder.
338 406 792 Office on Behalf of User Char(10) User working on behalf of another user.
348 416 802 Personal Status Char(1)
Y
Personal status changed
349 417 803 Access Code Char(1)
A
Access code added
R
Access code removed
350 418 804 Access Code Char(4) Access code.
354     (Reserved Area) Char(20)  
  422 808 (Reserved Area) Char(18)  
  440 826 Object Name Length 1 Binary(4) The length of the object name.
374 442 828 Object Name CCSID1 Binary(5) The coded character set identifier for the object name.
378 446 832 Object Name Country or Region ID1 Char(2) The Country or Region ID for the object name.
380 448 834 Object Name Language ID1 Char(3) The language ID for the object name.
383 451 837 (Reserved area) Char(3)  
386 454 840 Parent File ID1,2 Char(16) The file ID of the parent directory.
402 470 856 Object File ID1,2 Char(16) The file ID of the object.
418 486 872 Object Name1 Char(512) The name of the object.
  998 1384 Object File ID Char(16) The file ID of the object.
  1014 1400 ASP Name5 Char(10) The name of the ASP device.
  1024 1410 ASP Number5 Char(5) The number of the ASP device.
  1029 1415 Path Name CCSID Binary(5) The coded character set identifier for the path name.
  1033 1419 Path Name Country or Region ID Char(2)

The Country or Region ID for the path name.
  1035 1421 Path Name Language ID Char(3)

The language ID for the path name.
  1038 1424 Path Name Length Binary(4)

The length of the path name.
  1040 1426 Path Name Indicator Char(1) Path name indicator:
Y
The Path Name field contains complete absolute path name for the object.
N
The Path Name field does not contain an absolute path name for the object, instead it contains a relative path name. The Relative Directory File ID field is valid and can be used to form an absolute path name with this relative path name.
  1041 1427 Relative Directory File ID3 Char(16) When the Path Name Indicator field is N, this field contains the file ID of the directory that contains the object identified in the Path Name field. Otherwise it contains hex zeros.3
  1057 1443 Path Name4 Char(5002) The path name of the object.
    6445 Previous Authorization List Name Char(10) The name of the previous authorization list.
          Previous authorities
    6455 Previous Object Existence Char(1)
Y
*OBJEXIST
    6456 Previous Object Management Char(1)
Y
*OBJMGT
    6457 Previous Object Operational Char(1)
Y
*OBJOPR
    6458 Previous Authorization List Management Char(1)
Y
*AUTLMGT
    6459 Previous Authorization List Authority Char(1)
Y
*AUTL public authority
    6460 Previous Read Authority Char(1)
Y
*READ
    6461 Previous Add Authority Char(1)
Y
*ADD
    6462 Previous Update Authority Char(1)
Y
*UPD
    6463 Previous Delete Authority Char(1)
Y
*DLT
    6464 Previous Exclude Authority Char(1)
Y
*EXCLUDE6
    6465 Previous Execute Authority Char(1)
Y
*EXECUTE
    6466 Previous Object Alter Authority Char(1)
Y
*OBJALTER
    6467 Previous Object Reference Authority Char(1)
Y
*OBJREF
1
These fields are used only for objects in the "root" (/), QOpenSys, and user-defined file systems.
2
An ID that has the left-most bit set and the rest of the bits zero indicates that the ID is NOT set.
3
If the Path Name Indicator field is N, but the Relative Directory File ID is hex zeros, then there was some error in determining the path name information.
4
This is a variable length field. The first two bytes contain the length of the path name.
5
If the object is in a library, this is the ASP information of the object's library. If the object is not in a library, this is the ASP information of the object.
6
New objects may show a previous authority of *EXCLUDE because of the way in which the system assigns authorities to new objects.