Database account privileges
Hello,
As a part of security lockdown we scanned our PRPC 7.2 database and found the below. We are using Oracle 12C RAC database with split schema.
| Object privilege granted to account | Owner=<RULES_SCHEMA>;Grantee=<DATA_SCHEMA>;Object Name=PC_INDEX_FLOWREF;Privilege=ON COMMIT REFRESH |
There are several similar findings for Privilege=ON COMMIT REFRESH on several objects, reported as a violation on both schemas. Is this privilege required for runtime operations? or Is this needed only at the time of install/upgrade that can now be revoked?
P.S We upgrade from PRPC 6.1 SP2 to PRPC 7.2.2.
Thanks
Gopal
***Edited by Moderator Marissa to update platform capability tags****
Pegasystems Inc.
US
This privilege is not required. This is generated when we grant default privileges on any rule schema object to data schema owner. So data schema owner, which is also the base user of data source connection can access rule schema's objects during run time.