SecurityInsight settings · Settings > Guards
Database change that could remove data
| Key | SI_Guard_SchemaGateRefused_Enabled |
|---|---|
| Where | Settings > Guards (safety checks) > Other checks |
| Type | On / off |
| Default | Off |
| Edition | Community |
| Confirmation | SecurityInsight asks you to confirm before it is switched off. |
What it does
The safety check that protects your SecurityInsight database: A database change was refused because it is not approved for this install, or because it could remove data.
When enabled
the check works as described on the Guards page.
When disabled
no event and no mail. The step itself still stops, because a database change that could remove data is never applied automatically.
Risk and how to reverse it
Turning this check off removes a protection: when its condition happens, nothing holds or stops the step and no event is raised. Reversible at once: switch it back on; it applies from the next run.
Requires
Works only while "All guards (safety checks)" is on.
Recommended
Keep the default (off) unless you want this check to hold or stop the step. Change it when: Off by default: only the two brakes stay on (CIs retired by mistake, duplicate vulnerability records) -- this check is a warning you can switch on. Turn it on when you want it to hold or stop the step, and mail, again.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack