Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: Switch off Fine Grained Access Control within database packaged procedures

Re: Switch off Fine Grained Access Control within database packaged procedures

From: Neil <someone_at_microsoft.com>
Date: Tue, 23 Mar 2004 15:21:08 -0000
Message-ID: <405fe567@cpns1.saic.com>

<sybrandb_at_yahoo.com> wrote in message
news:a1d154f4.0403230703.67ac849f_at_posting.google.com...
> "Neil" <someone_at_microsoft.com> wrote in message
news:<405f9899_at_cpns1.saic.com>...
> > All,
> >
> > Using 8.1.7 DB
> >
> > Short of switching FGAC off on entry and back on prior to exit exit of
every
> > procedure is
> > there any way to mark the procedure as 'Run as procedure owner, rather
than
> > the user
> > invoking it?
> >
> > TIA
> >
> > Neil
>
> Either your question is very unclear or you don't understand what FGAC
> is.
> FGAC can't be switched on and off, it needs to be programmed. If you
> never programmed anything, you don't have FGAC enabled.
> Also: all procedures run *by default* as *procedure owner* instead of
> invoker.
> If you never created or replaced the procedure with the authid
> current_user pragma, it runs with definer rights.
>
> Sybrand Bakker
> Senior Oracle DBA

Sorry,

Should have been clearer, we programatically switch the FGAC on and off by returning null predicates
if the security model allows a user to see all the data.

What i am trying to achieve is explained (sort of) in another msg in the thread Received on Tue Mar 23 2004 - 09:21:08 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US