(no subject)

An explanation would be that the user who created the package has the authority to write to the table. This is how it is supposed to work.

Wayne

-----Original Message-----
Sent: Friday, June 22, 2001 3:01 PM
To: Multiple recipients of list ORACLE-L Subject:

Dear DBA's:

Have any of you come across this bizzare behavior? We have an application
that was written using Forms 6i. It runs on the web (using OAS 4.0.8.2) on
an 8i database.

A user has been granted access through a role. This role APP_READ only has
select privileges on all the tables for the application. But, on one of the
forms the user is able to write into a table. This form uses a package to
write into the table. The role has execute on the package. I checked the form code to see if there was any explicit connect. There was none. I even
recreated the user and the same thing is happening.

Can anyone explain this?

Thanks,

Manjula

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Krishnan, Manjula R.
  INET: MRKrishn_at_dcss.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L


(or the name of mailing list you want to be removed from).  You may

also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Bellefeuille, Wayne S
  INET: Wayne.Bellefeuille_at_allina.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L


(or the name of mailing list you want to be removed from).  You may

also send the HELP command for other information (like subscribing).