Re: EXECUTE IMMEDIATE and DBMS_SQL

pbewig_at_swbell.net wrote:

> I am writing a PL/SQL program (a single anonymous
> block) that performs a query input by the user at
> run-time. I want to allow the user to read any
> table or view in the database, and call any stored
> functions they might use. However, I am worried
> that a user, either through carelessness or malice,
> might try to write in the database, which I want
> to disallow (and record any attempt in a log).
>
> I've never done anything like this before.
>
> I know about EXECUTE IMMEDIATE and DBMS_SQL. Can I
> restrict access to read-only by either of these two
> methods? Is there some other technique I might use?
> What words can I use to search this newsgroup in
> Google Groups? What else do I need to be aware of?
>
> Many thanks,
>
> Phil

Re-examine the requirement and what you are proposing. If you just want to become unemployed a letter of resignation is a far more straight-forward approach.

Your posting would seem to indicate that you want to put a bunch of loaded guns into the hands of a bunch of school children and hope none of them pull the trigger.

-- 
Daniel A. Morgan
University of Washington
damorgan_at_x.washington.edu
(replace 'x' with 'u' to respond)