Database roles and grants inside the engine may be configured more broadly than required, such as application users holding administrative roles or schemas readable by every login. Any authenticated user can then read or modify data beyond their function, impacting the confidentiality and integrity of all data in the instance.
Excessive Privileges are Granted Within the Database
CCC.RDMS.TH07
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.RDMS.CP01 | SQL Support | The service always accepts and executes queries written in the SQL language for data definition, manipulation, and retrieval. |
| CCC.RDMS.CP07 | DB Self Managed Credentials | The service always supports database users authenticated by a username and password that the user creates and manages. |
| CCC.RDMS.CP17 | Cloud Identity Authentication | The service may be configured to authenticate database users with short-lived tokens issued to the cloud provider's identity principals, so that no long-lived database password needs to be stored or rotated. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.RDMS.CN07 | Enforce Least Privilege Within the Database | Ensure that database roles and grants inside the engine give each login only the privileges its function requires, so that one compromised login cannot read or modify every schema. |