granting execute on stored procedure

I’m working with our compliance officer on how to respond to a question posed to us by Internal Audit (helloooo Audit Season!).

What we’re looking at is execute privs that have been granted to some users. We found quite a few stored procedures that have been granted to some users, but I’m unclear if these will actually make a different or not due to invoker rights.

My question is this. If a stored procedure is created without using AUTHID CURRENT_USER/DEFINER, it runs as the SCHEMA OWNER, correct?

Please let me know and thanks in advance,

Jeremy

--
http://www.freelists.org/webpage/oracle-l