{"id":520,"date":"2017-02-23T15:53:22","date_gmt":"2017-02-23T15:53:22","guid":{"rendered":"https:\/\/www.threesl.com\/blog\/?p=520"},"modified":"2018-12-05T15:05:10","modified_gmt":"2018-12-05T15:05:10","slug":"safeguarding-unintended-data-loss","status":"publish","type":"post","link":"https:\/\/www.threesl.com\/blog\/safeguarding-unintended-data-loss\/","title":{"rendered":"Safeguarding Against Unintended Data Loss"},"content":{"rendered":"

Your project’s data is important and obviously you do not want to lose or damage any of it.<\/p>\n

We recommend the following steps to help guard against accidental deletions of, or damage to, your project data:<\/p>\n

    \n
  1. Turn on the ‘Enable recovery of deleted items’ option in your schema. Doing so ensures that items are only marked ‘recoverable’ when you delete them. So they can be restored if their deletion was a mistake.<\/li>\n
  2. Enable change histories for items wherever possible. Doing so ensures that when cross references are deleted. The items at both ends of the link will have entries added to their change histories recording the deletion of the link between them.<\/li>\n
  3. Do not grant BASELINE_RW or ACCESS_BYPASS privilege to any user unless it is absolutely necessary. In general, it is preferable to use the user profile MANAGER for operations where these privileges are needed, rather than to give them to a user who can use them at any time.<\/li>\n
  4. Avoid using the MANAGER login account whenever possible. This user profile has all privileges and maximum security clearance. Therefore, you can ANYTHING when logged-in with this user profile, including deleting everything in your database!<\/li>\n
  5. Create a separate administrative account, perhaps called MGR, ADMIN or ROOT, and give this account all privileges except ACCESS_BYPASS and BASELINE_RW<\/li>\n
  6. We recommend not giving the delete privilege to every user<\/li>\n<\/ol>\n

    \"Safeguarding<\/p>\n

    Article updated 05\/12\/2018 – Added recommendation to not give every user delete priv<\/h5>\n