Endpoint Administration Guide for Windows › Scope of Administration Authority › Default Permissions to Access the Database

Default Permissions to Access the Database

CA Access Control protects the internal database, seosdb, with internal file rules when it is running. Internal file rules are not visible in selang and cannot be deleted. You can write FILE rules to override the internal file rules. If you delete these FILE rules, CA Access Control reverts to the internal file rules.

The following internal file rules protect the database when CA Access Control is running:

• CA Access Control internal processes have full access to the database
• The NT AUTHORITY\System user has read access to the database
• All other accessors have no access to the database

Note: The default access rights for all other accessors were changed in r12.5 SP3. In previous releases, all other accessors had read access by default to the database files.

By default CA Access Control services run automatically after you install CA Access Control or reboot the endpoint. Consequently, the only user who can access the database out of the box is NT AUTHORITY\System. The CA Access Control administrators that you define during installation can also use a utility such as selang to update the database.