dba permissions on PRODDTA.F0901 and PRODDTA.F0911
We are going through a sox audit and it was discovered that the database permissions on F0901 and F0911 had ALTER, DELETE, INDEX, INSERT, SELECT, UPDATE, REFERENCES, ONCOMMITREFRESH, QUERYREWRITE, DEBUG
and FLASHBACK all granted to PUBLIC. This allows anyone logging into the database to perform any of the above actions on these tables. I understand it is easy on the developer to give everything to evryone and that application will not have permission problems when working with the database. But can we revoke all of this from these two tables and grant insert,update,delete only to the following users: DCLINK, JDE,OWSEC, and PRODCTL.
and FLASHBACK all granted to PUBLIC. This allows anyone logging into the database to perform any of the above actions on these tables. I understand it is easy on the developer to give everything to evryone and that application will not have permission problems when working with the database. But can we revoke all of this from these two tables and grant insert,update,delete only to the following users: DCLINK, JDE,OWSEC, and PRODCTL.
0