Re: Directly or via role granted object privileges

I think the big difference is that privileges granted via a role don't work if the user involved then runs a package or procedure which tries to work on the object.

In other words, I have a procedure X which says 'update scott.emp....'.

You have the ROLE Y, which includes the 'update on scott.emp' privilege.

You run the procedure, it won't work.

I grant you the 'update on scott.emp' privilege directly, you run the procedure and now it does work.

Regards
HJR "Stjepan Brbot" <stjepan.brbot_at_zg.hinet.hr> wrote in message news:ah27t7$33ik$2_at_as201.hinet.hr...
> What is the difference between object privileges granted directly to
> user or granted to user via it's role (firstly particular object
> privilege is granted to role and after that role is assigned to user)? I
> ask this because sometimes it is emphasized (in some installations,
> creation of repositories etc.) that some privileges should be granted
> directly to user, not via role!
>
> --
>
> Stjepan Brbot
>
>
>
Received on Tue Jul 16 2002 - 18:08:42 CDT