Review Role Grantees with WITH ADMIN OPTION

OrtaDüzey 1Manuel incelemedb2

Açıklama

Using the WITH ADMIN OPTION clause of the GRANT (Role) SQL statement, the security administrator can delegate the management and control of membership in a role to someone else.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

1. Connect to Db2 database: db2 => connect to <dbname> 2. Perform the following query: db2 => select rolename, grantee, admin from syscat.roleauth where grantortype <> 'S' and admin = 'Y' If the value returned is blank, that is considered a Pass.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

1. Connect to Db2 database: db2 => connect to <dbname> 2. Perform the following query: db2 => revoke admin option for role <role name> from user <user name>

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: db2databasemanual
Referans: CIS IBM Db2 12.1 Benchmark v1.0.0 - 6.2.6 Review Role Grantees with WITH ADMIN OPTION