Documentation - V-270518

Title

Database objects must be owned by accounts authorized for ownership.

Description

<VulnDiscussion>Within the database, object ownership implies full privileges to the owned object including the privilege to assign access to the owned objects to other subjects. Unmanaged or uncontrolled ownership of objects can lead to unauthorized object grants and alterations, and unauthorized modifications to data. If critical tables or other objects rely on unauthorized owner accounts, these objects can be lost when an account is removed. It may be the case that there are accounts that ...

Fix Text (Documentation Requirement)

Update system documentation to include list of accounts authorized for object ownership. Reassign ownership of authorized objects to authorized object owner accounts.