Re: Can I remove a table from the recycle bin?

On Apr 9, 9:00 am, Mladen Gogala <mgogala.SPAM_ME...._at_verizon.net> wrote:
> On Mon, 09 Apr 2007 14:23:58 +0200, sybrandb wrote:
> > There are numerous 'database independent' apps, where the developers
> > where just too lazy to find out which privileges they really need. I can
> > mention numerous vendors which don't implement any security at all.
>
> It must be fun when the management of the client companies is asked
> about such trifle things as SoX compliance. That usually happens when
> the companies want to sell their stock on Wall Street or NASDAQ.
> Basically, SoX ensures that any attempt to "cook the books" will leave a
> trail that can be used by law enforcement. SoX mandates extensive
> information security and auditing with the role of the all powerful DBA
> which can see or alter any data becoming increasingly problematic. There
> were numerous requests that the most sensitive data is encrypted so that
> the DBA cannot change them at will. Now, if the developers have DBA
> roles, DLJ audits would be a blast to watch. If I could be a fly on the
> wall.....
>
> --http://www.mladen-gogala.com

SOX! Ha! Try complying with this...
http://iase.disa.mil/ditscap/ditscap-to-diacap.html#diacap

You are absolutely right, but developing applications and configuring them for security are two different things in most places I've worked. I always try to change that. Compliance sells and so does security refactoring. That said, the environments are Alpha/Prototype environments, so giving access and helping out is just good PR especially when some of the worlds top java devs don't believe they need DBAs. They're database independent.... Received on Mon Apr 09 2007 - 08:19:22 CDT