I1 (2 points)
https://knobit.org/id/task/dsec-access-control/I1
Also as Turtle · JSON-LD · RDF/XML
| dcterms:license | https://creativecommons.org/licenses/by/4.0/ |
|---|---|
| owl:sameAs | https://bitbucket.org/reffa/ontology/id/task/dsec-access-control/I1 |
| rdfs:label | I1 (2 points) en |
| schema:hasPart | dsec-access-control I1: teller row security on an updatable branch code |
| schema:hasPart | dsec-access-control I1: the DBA role is not logged |
| schema:hasPart | dsec-access-control I1: break-glass has no expiry |
| schema:hasPart | dsec-access-control I1: a role has no owner |
| schema:identifier | I1 |
| schema:position | 3 |
| schema:text | 0.5 each. (a) TELLER's row filter uses account.branch_code, which tellers can update: the filter must use the branch from the HR directory, or branch_code is made read-only for tellers. (b) DBA is privileged and not logged. (c) Break-glass BG-001 has no expiry and no reviewer. (d) REPORT_READ has no owner. en |