Re: want to see code of stored procedure but without permission to execute it

On Sep 25, 11:24 am, Brian Tkatch <N/A> wrote:
> On Tue, 25 Sep 2007 06:39:37 -0700, "Chris ( Val )"
>
>
>
>
>
> <chris..._at_gmail.com> wrote:
> >On Sep 25, 3:38 pm, Benny <benny.der..._at_gmail.com> wrote:
> >> Hi people,
> >> is it possible in Oracle9i/10g to grant a user permission to see the
> >> code of someone else's procedure but without the permission to execute
> >> this procedure ?
> >> And I do not want to give this user the system privilege 'select any
> >> dictionary' because then he can see everything in the entire database.
>
> >> example : I want Oracle user "FLX0_RO" able to see the code of a
> >> procedure from owner "FLX0". But FLX0_RO may not be able to execute
> >> the procedure.
>
> >> Is this possible with standard Oracle grants ?
>
> >Check out the USER_SOURCE table.
>
> >Perhaps you could create a view based upon this table,
> >and grant appropriate permission on that view?
>
> >Cheers,
> >Chris
>
> I think you mean ALL_SOURCE. USER_SOURCE would be for the user's own
> objects.
>
> B.- Hide quoted text -
>
> - Show quoted text -

I provided out developers a view to do this. Without looking up the view I believe it was based on USER_SOURCE where I just removed the line that limited the results to the user's code.

You need to issue a couple of direct grants with the grant option on the underlying SYS objects to the view owner and then grant the view to whoever you want to allow to see package body source (also procedure, function, and trigger source).

HTH -- Mark D Powell -- Received on Tue Sep 25 2007 - 11:43:58 CDT