Re: granting role in application

[Quoted] Look at the dbms_session package. You can use dbms_session.is_role_enabled [Quoted] to see if the user already has that role enabled. If not, you can use dbms_session.set_role to enable the role for the session. If you really want to make it bullet-proof, you can grant the non-default [Quoted] role with password protection. That way the user can't enable the role himself in SQL*Plus.

John Alexander
www.SummitSoftwareDesign.com
St. Petersburg, FL

Joost Bataille <bataille_at_ic.uva.nl> wrote in message news:96bt32$kej$1_at_news.surfnet.nl...
> Hello everyone,
> I'm trying to grant a user a role in an application. That means that
 before
> login a user only has 'create session' privilege. With that privilege he
> logs in and in the first form in the post-logon trigger something has to
 be
> done to grant another role. I've seen this done by changing a user's
 default
> role: the user already has a role with the required object privileges
> (selects on tables etc.) but this role is not his default role - it's not
> active when he logs on. In the form the default role should then be
 changed
> (doesn't this require the user to connect again?). Any ideas how to do
 this?
> The purpose of it all is that a user loggin on with SQLPlus doesn't have
 any
> privileges.
> Thanks, Joost
>
>
>
>
>
Received on Tue Feb 13 2001 - 19:21:16 CET