Re: SET ROLE

From: Vladimir M. Zakharychev <bob--nospam--_at_dynamicpsp.com>
Date: Tue, 30 May 2006 17:50:33 +0400
Message-ID: <e5hijb$27k6$1@hypnos.nordnet.ru>

"Marcin" <smarcinek_at_interia.pl> wrote in message news:1148996789.078974.137590_at_i40g2000cwc.googlegroups.com...
> SET ROLE is used to de/activate roles for user during session. Does it
> mean that it is possible to dynamicly change users permissions without
> closing database connection for user? Is it possible to activate roles
> selectively in application depending on what permissions are needed at
> the moment? Without closing database connection ofcourse...
>
> greetings
> Marcin
>

Yes, with one important caveat: PL/SQL stored procedures created with definer rights ignore roles completely and always run in environment equivalent to SET ROLE NONE.

-- 
   Vladimir M. Zakharychev
   N-Networks, makers of Dynamic PSP(tm)
   http://www.dynamicpsp.com

Received on Tue May 30 2006 - 08:50:33 CDT