Re: Problem in Create Store Procedure use non-schema owner account

I heard you did a pretty extensive thread on this pretty recently. Got an address for it?
- Dc.

Thomas Kyte wrote:

> A copy of this was sent to anthonywmhui_at_hotmail.com
> (if that email address didn't require changing)
> On Wed, 09 Jun 1999 03:17:30 GMT, you wrote:
>
> >Hi,
> >
> >I created all database objects(table, indexes) use the account CCRDEV
> >and grant select, update, insert and delete to a ROLE. This role is
> >then granted to a user DCCRMGR. I describe the table RULE use the
> >DCCRMGR account and everything Ok. However, when I try to create a
> >Store Procedure that access RULE, the following error appear
> >
> >LINE/COL ERROR
> >-------- ---------------------------------------------------------------
>
> roles are never enabled during the execution of a procedure.
>
> Try this:
>
> SQL> set role none;
> SQL> "statement you want to test to see if it'll work in a procedure"
>
> If you can do it in plus with no roles you can do it in a procedure. If you
> can't, you must have the privelege from a role and hence won't be able
> to do it in a procedure.
>
> You probably have the privelege to do what you are trying to do in the procedure
> via a role. Grant the privelege directly to the owner of the procedure and
> it'll work.
>
> Roles are not used to manage developers priveleges (you have 1's or 10's of
> developers) but are used to manage end user priveleges (you have 100's or 1000's
> of them)
>
> See http://www.oracle.com/ideveloper/ for my column 'Digging-in to Oracle8i'...
> Mirrored (and more current) at http://govt.us.oracle.com/~tkyte/
>
> Current article is "Fine Grained Access Control", added June 8'th
>
> Thomas Kyte tkyte_at_us.oracle.com
> Oracle Service Industries Reston, VA USA
> --
> Opinions are mine and do not necessarily reflect those of Oracle Corporation
Received on Wed Jun 09 1999 - 16:58:57 CDT