28.2.11

SAP Note 23860 - Informix: Access rights on SAP Informix tables

Symptom:

Some SAP/Informix tables have public access.

Cause and prerequisites

When the R/3-System is delivered, the rights on the database tables are assigned in such a way that all permissions were deleted on the R/3 Informix tables (except for the table "SAPUSER" from 2.1J/2.2D). On the other hand, new tables created by the R/3-System are given public access as a default by Informix.

Solution
The system is currently set up in such a way that only the sapr3 user as owner of the database, as well as the adm user, can access the informix database. The database is locked to all other users, as they have no CONNECT privileges.
If the adm user's rights to these newly created tables are also removed, these rights at present can only be deleted manually by the user "sapr3": $ su - adm
$ su sapr3
$ dbaccess << !
REVOKE ALL ON FROM PUBLIC;
As of SAP Release 3.0, for all tables created via the R/3 Dictionary, a "REVOKE ALL ..." is executed after every "CREATE TABLE ...".

By -

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)