Skip to content
Log In

IDMS must protect against the use of web-based applications that use generic IDs.

An XCCDF Rule

Description

Web-based applications that allow a generic ID can be a door into IDMS allowing unauthorized changes whose authors may not be determined.

ID
SV-251597r960864_rule
Version
IDMS-DB-000170
Severity
Low
References
Updated

Remediation Templates

A Manual Procedure

For web-based applications using generic IDs, set the individual user ID (external identity) to be recorded in the journal.

For JDBC applications, use the "IdmsConnection setIdentity" method.

For ODBC applications, use the "SQLSetConnectAttr" function with the IDMS_ATTR_EXTERNAL_IDENTITY attribute type.

Run journal report "JREPORT 010" and" JREPORT 008" to audit the individual user ID.