DBMS application user roles should not be assigned unauthorized privileges.

Part of DBMS application user role privilege assignment

SV-24705r1_rule DBMS application user roles should not be assigned unauthorized privileges.

Vulnerability discussion

Unauthorized access to the data can lead to loss of confidentiality and integrity of the data.

Check content

Compare privileges assigned to database application user roles to those defined in the System Security Plan. If the assigned privileges do not match the authorized list of privileges, this is a Finding.

Fix text

Use the grant and revoke commands to assign the authorized privileges as listed in the System Security Plan to custom database application or application user roles.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.