A bunch of shared views were deleted in our Staffing Allocations Timeline page. Can we view who deleted these and when?
I found Audit Modern UX Views but we don't know the 5xxxx numbers of the views. Is there an easy way to do this please?
Release : 16.1.2
Component: Clarity MUX Views
The views are stored in table ODF_UI_VIEWS. To get the view details you can use below query
SELECT ouv.ID, ouv.NAME,ouv.TYPE,ouv.IS_SYSTEM, ouv.OWNER, ouv.CREATED_DATE,
ouv.LAST_UPDATED_DATE ,csu.USER_NAME AS LAST_UPDATED_BY ,ouv.SHARED_WITH
FROM ODF_UI_VIEWS ouv JOIN CMN_SEC_USERS csu
ON csu.id=ouv.LAST_UPDATED_BY
WHERE name LIKE '%VIEW_NAME%';
To audit who deleted views, follow below steps
1: Look at the app-access-YYYY-MM-DD.log file
2: Locate an entry similar to:
*.*.*.*|[03/Jul/2023:23:31:06 -0700]|DELETE /ppm/rest/v1/private/views/5014077 HTTP/1.1|200|-|197|5289204__11853ED8-70B6-4B74-93C1-D52D716E0609
3: Note the following
4: If the session is still active (i.e. user haven't logged out/session is purged) we can track the username using below query.
SELECT USER_NAME, FULL_NAME, USER_UID, EMAIL_ADDRESS
FROM cmn_sec_users
WHERE id IN (SELECT USER_ID FROM cmn_session_audits WHERE session_id =SESSION_ID)
5: In case if the session is purged or user logged out the session entry is removed from DB and we can't audit the same.
Refer Tech Doc Working with Saved Views and grant appropriate access right to restrict who can DELETE views