Re: Calling procedure
Date: Wed, 27 Aug 2008 06:59:27 -0700 (PDT)
Message-ID: <d6f6e055-8135-40fe-bf46-ef2b0b0dddd0@8g2000hse.googlegroups.com>
The Definer = Daffy_Duck schema
A Definer's Rights Subprogram is a definer subprogram created with AUTHID DEFINER syntax or no "AUTHID" clause at all.
The Invoker = Donald_Duck schema
An Invoker's Rights Subprogram is a definer subprogram created with AUTHID CURRENT_USER syntax.
Using Roles:
The use of roles in a subprogram depends on whether it executes with definer's rights (Daffy's rights) or invoker's rights (Donald's rights). Within a Daffy's (Definer's) rights subprogram, all roles are disabled. Roles are not used for privilege checking, and you cannot set roles.
Within a Donald's (Invoker's) rights subprogram, roles are enabled
(unless the subprogram was called directly or indirectly by a Daffy's
(Definer's) rights subprogram). Roles are used for privilege checking,
and you can use native dynamic SQL to set roles for the session.
However, you cannot use roles to grant privileges on template objects
because roles apply at run time, not at compile time.
Not sure if this helps or not. Good luck on you debugging efforts. Received on Wed Aug 27 2008 - 08:59:27 CDT