Re: Interesting Exploit in PL/SQL

Well yeah, for the 'enable' procedure we do. But when we try to disable it, and Oracle doesn't like that, we just don't care - because if it can't be disabled, it couldn't have been enabled in the first place :)

Stefan

On 11/30/06, Jared Still <jkstill_at_gmail.com> wrote:
>
> On 11/30/06, Jacques Kilchoer <Jacques.Kilchoer_at_quest.com> wrote:
> >
> > So if your procedure was only able to enable auditing on half the
> > objects in the database, and failed to enable auditing on the other half,
> > you didn't care? I guess in this case it would make sense. But then the
> > other option would be to not run the procedure at all, if you didn't care
> > which objects had auditing enabled.
> >
> > ------------------------------
> > **
> >
>
> IAC, I would think you would want a log of the errors.
>
> --
> Jared Still
> Certifiable Oracle DBA and Part Time Perl Evangelist
>

--
http://www.freelists.org/webpage/oracle-l