RE: Execute priv to an isolated procedure inside a package

From: Jack C. Applewhite <japplewhite_at_inetprofit.com>
Date: Tue, 27 Mar 2001 12:17:42 -0800
Message-ID: <F001.002D95BF.20010327120540@fatcity.com>

Ian,

You are 100% correct.

A procedure, function, cursor, etc. not declared in the package spec, but only in the package body is considered private to the package and cannot be executed by any external call, only by calls from other procedures, functions, etc. within the package.

That way you can only expose the items that you truly want to be public. IMHO, it is not a limitation at all, but a very valuable mechanism for enforcing selective security.

Jack

Jack C. Applewhite
Database Administrator/Developer
OCP Oracle8 DBA
iNetProfit, Inc.
Austin, Texas
www.iNetProfit.com
japplewhite_at_inetprofit.com

-----Original Message-----
MacGregor,
Ian A.
Sent: Tuesday, March 27, 2001 7:45 AM
To: Multiple recipients of list ORACLE-L package

I have not tested this. I believe ,with about a 60% level of confidence, you can place a function/procedure in the body of a package without placing its definition in the package's specification. If so, the function/procedure should not be available when exectute is granted on the package.

Ian MacGregor
Stanford Linear Accelerator Center
ian_at_slac,stanford.edu

-----Original Message-----
Sent: Monday, March 26, 2001 5:40 PM
To: Multiple recipients of list ORACLE-L

Hi friends,

One cannot grant execute privilege to a specific procedure/function inside a
package, but only for all or nothing that is in that package.

Anybody has an idea how this limitation can be overcomed. One idea is to
create a separate stand-alone procedure that will just be a wrapper around
the packaged procedure and call it. Any other ideas.

Thanks.

Djordje

--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: Jack C. Applewhite
INET: japplewhite_at_inetprofit.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Tue Mar 27 2001 - 14:17:42 CST