Secure Schema DATAACCESS Authority

СредњаНиво 1Ручни прегледdb2

Опис

The Schema DATAACCESS authority allows the user to leverage DML level commands i.e. SELECT, INSERT, UPDATE, DELETE, LOAD, and EXECUTE any package or routine within a schema. It is recommended that the Schema DATAACCESS authority be granted to authorized users only.

Како се проверава

Метод провере: Ручни преглед

Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.

1. Connect to the Db2 database. db2 => connect to <dbname> 2. Run the following command: db2 => select distinct schemaname, grantee, granteetype from syscat.schemaauth where dataaccessauth = 'Y' 3. Review the list of users, groups, and roles in the above output to ensure only approved users, groups, and roles are assigned.

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Revoke this permission from any unauthorized users. 1. Connect to the Db2 database. db2 => connect to <dbname> 2. Run the following command: db2 => REVOKE DATAACCESSAUTH ON SCHEMA <schema> FROM USER <username>

Својства

Оперативни системи: Било који
Ознаке: db2databasemanual
Референца: CIS IBM Db2 12.1 Benchmark v1.0.0 - 6.1.20 Secure Schema DATAACCESS Authority