Oracle Stored Procedure Security

From: Pete Petersen <morph_at_diac.com>
Date: 1997/07/19
Message-ID: <33D14EFD.3606@diac.com>#1/1

Hypothetical Situation:

User "superuser" creates a stored procedure called "update_customers" that performs an update on table "customer_master_file". "Superuser" owns the "customer_master_file" table and therefore has full object privileges on this table

User "enduser" has been given execute access on the "update_customers" stored procedure, however, "enduser" does not have UPDATE privileges on the "customer_master_file" table.

Query:

Will "enduser" be able to update the "customer_master_file" when running the "update_customers" stored procedure OR will the update fail since "enduser" doesn't have update privileges on the table.

What do YOU think. Received on Sat Jul 19 1997 - 00:00:00 CDT