Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The DBMS must enforce approved authorizations for logical access to the system in accordance with applicable policy.
Description
Discussion Text
Strong access controls are critical to securing application data. Access control policies (e.g., identity-based policies, role-based policies, attribute-based policies) and access enforcement mechanisms (e.g., access control lists, access control matrices, cryptography) must be employed by applications, when applicable, to control access between users (or processes acting on behalf of users) and objects (e.g., devices, files, records, processes, programs, domains) in the information system.
Consideration should be given to the implementation of an audited, explicit override of automated mechanisms in the event of emergencies or other serious events.
If the DBMS does not follow applicable policy when approving access it may be in conflict with networks or other applications in the information system. This may result in users either gaining or being denied access inappropriately and may be in conflict with applicable policy.
Consideration should be given to the implementation of an audited, explicit override of automated mechanisms in the event of emergencies or other serious events.
If the DBMS does not follow applicable policy when approving access it may be in conflict with networks or other applications in the information system. This may result in users either gaining or being denied access inappropriately and may be in conflict with applicable policy.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.