GDPR: How are user names stored in Automic

Products

• CA Continuous Delivery Automation - Automation Engine

Issue/Introduction

Where and how are are the the full user names (e.g. Peter Smith) stored in the Automic database.

For instance, in “Version management/Modified by” and “General/History” the full user name is visible in AWI.
Are these full user names also visible in the the respective tables that store this information.

Environment

Release : 12.3

Component : AUTOMATION ENGINE

Cause

Security concerns

Resolution

You can use the following query to see how the data is stored, replacing JOB.NAME with an example job:

select OH_Name,OH_IDNR,oh_cruseridnr,to_char(oh_crdate,'YYYY-MM-DD HH24:MI:SS'),oh_moduseridnr,to_char(oh_moddate,'YYYY-MM-DD HH24:MI:SS') from OH where OH_name like '%JOBS.NAME%'

You will see that the name of the user is only stored as an OH_IDNR.

 

The full name of the user can still be found readable in the database but only once and indirectly.:

select OH_IDNR,OH_name,OH_OTYPE from OH where OH_IDNR=<OH_IDNR_found>