RE:[sap-basis] Blocking OUTLN And Revoking Grants to Public

Reply from Kensai on May 22 at 11:07 AM
Hi

Sorry for the delay, can you put the content of the metalink note please?

Thank you.

---------------Original Message---------------
From: Kensai
Sent: Tuesday, May 15, 2012 8:45 AM
Subject: Blocking OUTLN And Revoking Grants to Public

Hi guys!

Well, our auditing and security team just implemented some security policies for ORACLE and we need to apply it on our SAP landscape (SAP R/3 4.7 EXT2.00 with Oracle 10.2.0.4 on Windows 2K8), these policies are:

- Lock and expire ANONYMOUS, CTXSYS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, ORDDATA, OWBSYS, ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WKSYS, WKPROXY, WMSYS and XDB. (In my case none of the users exists but OUTLN)

- The PUBLIC role must have NO privileges.

Did any of you have implemented this? Because i did and CI dispatcher didn't come up at all, i had to restore from an offline backup and everything came up fine.

I consulted several SAP notes(583861, 700548, 926023), blogs and forums but so far i haven't come with a definitive solution. I couldn't check metalink link mentioned in one of the sap notes, i am right now opening a report so SAP can forward it to me.

I appreciate all the insight and help you can give me on this.

BR's
Martim

 
Reply to this email to post your response.
 
__.____._
Manage Settings | Unsubscribe | Create FAQ | Send Feedback
  
Copyright © 2012 Toolbox.com and message author.
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
 
Kensai  
 
Mark as helpful
View this online
Ask a new question
 
In the Spotlight
Toolbox.com for iPhone & Android: Ask Questions & Get Answers Anywhere. Download the Free App

_.____.__

No comments:

Post a Comment