The messaging security audit events SECURITY_AUTHN, SECURITY_AUTHZ,
SECURITY_MGMT_CONFIG, and SECURITY_AUTHN_TERMINATE are produced when a cell
administrator changes the contents of a service data object (SDO) repository
in an import or remove operation.
Audit events produced when a cell administrator changes the contents of
a service data object (SDO) repository in an import or remove operation are
as follows:
- The cell administrator connects to a messaging bus:
- A SECURITY_AUTHN event is produced when the identity of the messaging
client connecting to the Enterprise Java Bean container that includes the SDO
repository is authenticated by the application server.
- A SECURITY_AUTHZ event is produced when the identity of the messaging
client is checked for access authority to the foreign bus.
- A SECURITY_MGMT_CONFIG event is produced when messaging client issues
a remove or import request that results in a change to the contents of the
SDO repository.
- When the connection between a messaging client and the foreign bus is
terminated, a SECURITY_AUTHN_TERMINATE event is produced.
To record these audit events, you create security event type filters for
them.