Comments for Code Based Access Control (CBAC) : Granting Roles to PL/SQL Program Units in Oracle Database 12 Release 1 (12.1)
Anand Sathyamurthy said...Wonderful explanation . thanks a lot.
Eter Pani said...In Explanation you hide the fact that before role can be granted to the function it has to be granted to the owner of the function.
It would be nice if you highlight it.
I've added a mention of this, with a demonstration, to the bottom of the section, just in case anyone else is confused by this.
Patrick Jolliffe said...Tim,
Could you double check the first sentence, in particular:
"are executed with all the privileges granted directly to the user that created them."
Surely it should be granted to the schema that 'owns' them?
For example if I am logged in at PATRICK with DBA privileges (hence CREATE ANY PROCEDURE) and create a proc in TIM, it runs with TIMs privileges right?
Yep. My assumption in the sentence was you would connect to the schema to create the object. That's a little basic. :)
DO NOT ask technical questions here! They will be deleted!
These comments should relate to the contents of a specific article. Constructive criticism is good. Advertising and offensive comments are bad and will be deleted!
If you post personal information (name, email address etc.) you are agreeing to them being stored and displayed. Feel free to remain anonymous.