Re: when and where use "set role"

"Terry Mu" <terry_mu_at_yahoo.com> wrote in message news:GXHv9.101899
> I'm not sure about when and where "set role" be used.
> It seems to me this command should be issused in a user's session, to
> himself. But why does the user himself bother to set role or "set role
none"
> instead of "set role all"?
>

Someone else may have another use, but I use it for security to allow a user to update data when in the application's screens but to protect the data when the user goes in through SQL*Plus or some other 3rd party tool. Example:

1. Create a role and password protect it.
2. Assign the role to a user, but not as a default role. This means when they log in, it is not active.
3. Within the application, use the set_role command to activate the role.