Query

Applies to. 7.2.6 restricts all user access to query repositories of stored cardholder data. Ordinary users reach the data through applications or other programmatic methods, with access and allowed actions set by user role and least privilege, and only the responsible administrators can directly access or query the repositories. Assessors examine both the procedures for granting that access and the configuration settings on the repositories themselves.

Limits. 7.2.6 applies to repositories of stored cardholder data, such as databases and file stores holding PAN; it does not restrict queries against systems that hold no stored cardholder data.