Secure Schema DATAACCESS Authority

MediaNivel 1Revisión manualdb2

Descripción

The Schema DATAACCESS authority allows the user to leverage DML level commands i.e. SELECT, INSERT, UPDATE, DELETE, LOAD, and EXECUTE any package or routine within a schema. It is recommended that the Schema DATAACCESS authority be granted to authorized users only.

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

1. Connect to the Db2 database. db2 => connect to <dbname> 2. Run the following command: db2 => select distinct schemaname, grantee, granteetype from syscat.schemaauth where dataaccessauth = 'Y' 3. Review the list of users, groups, and roles in the above output to ensure only approved users, groups, and roles are assigned.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Revoke this permission from any unauthorized users. 1. Connect to the Db2 database. db2 => connect to <dbname> 2. Run the following command: db2 => REVOKE DATAACCESSAUTH ON SCHEMA <schema> FROM USER <username>

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: db2databasemanual
Referencia: CIS IBM Db2 12.1 Benchmark v1.0.0 - 6.1.20 Secure Schema DATAACCESS Authority