Re: alter session set sql_trace inside a procedure

From: VC <boston103_at_hotmail.com>
Date: Fri, 05 Mar 2004 23:22:31 GMT
Message-ID: <XY72c.184741$jk2.668422@attbi_s53>

Pls. see below:

"Sybrand Bakker" <gooiditweg_at_sybrandb.demon.nl> wrote in message news:lamh40157isdu2uk0g645ov89qoeksh1bf_at_4ax.com...
> On Fri, 05 Mar 2004 19:26:30 GMT, "VC" <boston103_at_hotmail.com> wrote:
>
> >You have to grant the alter session privilege directly, granting via a
role
> >is not sufficient:
> >
> >grant alter session to <user>
> >
> >... or use AUTHID CURRENT_USER which is not advisable.
> >
> >
> >VC
> >
> >>
>
> Could you explain? *Direct* grants are a maintenance nightmare, as
> they are granted by SYS and not exported.

It's a design choice, really. If you are willing to sacrifice better definer right procedure performance and security for the invoker right flexibility, it's your choice that may or may not be right.

The performance penalty includes not only run-time checks but also higher shared pool usage.

I believe Mr. Kyte treats the subjects extensively in his first book.

Rgds.

VC Received on Fri Mar 05 2004 - 17:22:31 CST