UTL_FILE used in Clarity

Products

• Clarity PPM On Premise

Issue/Introduction

We would like to know if

if execute privilege on utl_file can be revoked from public. because

This is being granted to PUBLIC in the prod and dev environments are being flagged as security hole.

We use Oracle DB.

Environment

Release : 15.6

Component : CA PPM INTEGRATIONS & INSTALLATIONS

Resolution

UTL_FILE  its permissions for the database user to read files on the server and can be needed to load the patches, upgrades, etc.. for schema changes.
You can grant it to a specific user instead of the public role
GRANT EXECUTE utl_file TO clarity;