Views Deleted - How to track who deleted it?

Products

• Clarity PPM SaaS

Issue/Introduction

A bunch of shared views were deleted in our Staffing Allocations Timeline page. Can we view who deleted these and when?

I found Audit Modern UX Views but we don't know the 5xxxx numbers of the views. Is there an easy way to do this please?

Environment

Release : 16.1.2

Component: Clarity MUX Views

Resolution

The views are stored in table ODF_UI_VIEWS. To get the view details you can use below query

SELECT ouv.ID, ouv.NAME,ouv.TYPE,ouv.IS_SYSTEM, ouv.OWNER, ouv.CREATED_DATE, 
ouv.LAST_UPDATED_DATE ,csu.USER_NAME AS LAST_UPDATED_BY ,ouv.SHARED_WITH  
FROM ODF_UI_VIEWS ouv JOIN CMN_SEC_USERS csu
ON csu.id=ouv.LAST_UPDATED_BY
WHERE name LIKE '%VIEW_NAME%';

To audit who deleted views, follow below steps

1: Look at the app-access-YYYY-MM-DD.log file

2: Locate an entry similar to:

*.*.*.*|[03/Jul/2023:23:31:06 -0700]|DELETE /ppm/rest/v1/private/views/5014077 HTTP/1.1|200|-|197|5289204__11853ED8-70B6-4B74-93C1-D52D716E0609

3: Note the following

• 5014077 is the view id 
• 5289204 is the session id

4: If the session is still active (i.e. user haven't logged out/session is purged) we can track the username using below query.

SELECT USER_NAME, FULL_NAME, USER_UID, EMAIL_ADDRESS
FROM cmn_sec_users
WHERE id IN (SELECT USER_ID FROM cmn_session_audits WHERE session_id =SESSION_ID) 

5: In case if the session is purged or user logged out the session entry is removed from DB and we can't audit the same.

Additional Information

Refer Tech Doc Working with Saved Views and grant appropriate access right to restrict who can DELETE views