Re: Another Question on Authority and Security

No as it is in user A schema then it has authority the same as user A always as The compiler of the object isn't the owner the schema owner where it is created is the owner.

>From the Concepts guide

Oracle verifies that the calling user owns or has the EXECUTE privilege on the procedure or encapsulating package. The user who executes a procedure does not require access to any procedures or objects referenced within the procedure; only the creator of a procedure or package requires privileges to access referenced schema objects.

Cheers

--
=================================================
Peter McLarty               E-mail: Peter.Mclarty_at_mincom.com
Technical Consultant        WWW: http://www.mincom.com
APAC Technical Services     Phone: +61 (0)7 3303 3461
Brisbane,  Australia        Mobile: +61 (0)402 094 238
                            Facsimile: +61 (0)7 3303 3048
=================================================
A great pleasure in life is doing what people say you cannot do.

    - Walter Bagehot (1826-1877 British Economist)
=================================================
Mincom "The People, The Experience, The Vision"

=================================================

This transmission is for the intended addressee only and is confidential 
information. If you have received this transmission in error, please 
delete it and notify the sender. The contents of this e-mail are the 
opinion of the writer only and are not endorsed by the Mincom Group of 
companies unless expressly stated otherwise. 






Kevin Lange <klange_at_ppoone.com>
Sent by: root_at_fatcity.com
06-03-2003 07:31 AM
Please respond to ORACLE-L

 
        To:     Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
        cc: 
        Subject:        Another Question on Authority and Security


Given:
  User_A Owns procedure 'MY_PROCEDURE'.
  User_B originally compiles procedure ''USER_A.MY_PROCEDURE", thereby 
allowing 'MY_PROCEDURE" to be able to do whatever User_B can.
  User_C recompiles "USER_A.MY_PROCEDURE"  by issuing the "ALTER PROCEDURE 
USER_A.MY_PROCEDURE COMPILE;" command.
 
Question:
  Is procedure "USER_A.MY_PROCEDURE" now able to do whatever User C can do 
instead of User B ??  Or does it retain the authority from User_B instead.
 
Thanks
 
Kevin


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: 
  INET: Peter.McLarty_at_mincom.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).