Hi Babu,
Absolutly right,
Ths has to be done at the initial stage of implementation project.
Currently i am working on implementation project .
This issue has come when testing started in UAT server which was having non dialog background user.
So may be missed as u said project team and security team could not spend time before..
Anyways thanks for your feedback on this.
I will check and remove what is not required.
Cheers.
SandeepT