http://support.sas.com/kb/52/078.html

... For example, a user who has Write access to an operating system directory (for example, in order to create physical tables) can use host commands to delete and replace files within that directory. Such commands operate independently of any metadata binding.
Currently, there is no workaround or solution for this problem. ...

Follow development of OS guys, needing to go for SIEM. --This is waiting for the collision.---