Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.misc -> Re: accessing (packaged) procedure name within procedure

Re: accessing (packaged) procedure name within procedure

From: Billy Verreynne <vslabs_at_onwe.co.za>
Date: 18 Aug 2003 01:59:38 -0700
Message-ID: <1a75df45.0308180059.1cdb1190@posting.google.com>


jetlag11235_at_yahoo.com (Jetlag) wrote
>
> I'll admit that my question may not have been clear, but it does make
> sense in the context asked -- no matter how many users are connected.
> Any particular procedure is always running as a particular user ...
> either as the owner or the caller (using authid). If procedure X is
> called by procedure Y, then it is legitimate to believe that procedure
> Y can identify procedure X without any special arguments from X.
> Indeed, this works when X is not wrapped in a package (see
> dbms_utility.format_call_stack).

Hmm.. instead of offering hacks to determine this, I'll rather question the WHY you want to do this.

It looks to me at an attempt to implement some form of access control or security feature, where proc Y checks by whom it is called, and only executes if it sees it has been called by X.

This is IMO a very dangerous way to implement security - and checks like that can easily be bypassed.

If this is not a security thing, we can hopefully provide better alternatives if you state the requirement you're trying to address here,

If it is a security thing - this simply ain't how it is suppose to be done in Oracle.

--
Billy
Received on Mon Aug 18 2003 - 03:59:38 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US