The JD Edwards Solutions Marketplace | Your JDE

Automated Oracle Database Security Remediation

Description:: By default, whenever an Oracle table is generated through JDE, full Oracle database access (SELECT, INSERT, UPDATE, DELETE, ALTER, etc.) is granted to PUBLIC. This means that any Oracle account in the database can essentially do anything to your JDE data. Obviously your database will not pass an internal or external audit, but worse yet you run a substantial risk that your entire business could be irreparably harmed if someone intentionally, or unintentionally, modifies or destroys data.

We solved this problem at DBConnect Solutions with the creation of a tool we call the "JDE Security Sniffer". This tool monitors the database, and when it detects the presence of PUBLIC grants on JDE-owned tables, it removes the PUBLIC access and assigns appropriate access to Oracle roles. It then automatically emails a log file to the Oracle DBA so there is an audit trail of the activity. A complementary Oracle security report is also generated on a periodic basis to report any JDE-owned tables that may still have PUBLIC access, or those tables in which appropriate access has not been granted to Oracle roles. We therefore have a process which is self-governing to ensure our databases always remain secure.

Why should you buy this product?: Completely automated Oracle database security
Available Since:: 2001

Available additional information: