How to report activity on the IDMS catalog USER security record. Specifically who deleted a user and when for audit reporting.
Release:19.0
The user record id 1031 is the catalog USER record.
To find any updates to the USER record in SYSUSER.DDLSEC run JREPORT 008, select on the record type 1031 and look for any ERASE verb (typically 52 or 4). Sample input:
JREPORT=8 SELECT WHEN TYPE EQ ( 'BFOR' 'AFTR' ) * AND USER-REC-ID EQ 1031
Then take the transaction id of the update in question and run JREPORT 009 to find all journal records for the transaction.
The BGIN record will contain the userid of the person who erased that particular USER record and the date and time.
See IDMS documentation section JREPORT 008 - Formatted Record Dump and JREPORT 009 - User ID