Oracle FAQ | Your Portal to the Oracle Knowledge Grid |
![]() |
![]() |
Home -> Community -> Usenet -> c.d.o.server -> Roles
I setup all these nice roles for users/developers etc and now dynamic sql
won't work with roles the permissions must be directly granted to the user
or to public.
Any comments about directly granting perms to public (why or why not) what
has your group done on this issue.
I have thought of a few reasons why does this has to have directly grants -
(what is the reason) is this going to change
in a future release like 8.1 or 9
/* PLSQL DYNAMIC SQL REQUIRES DIRECT GRANTS */
grant CREATE TABLE to public; grant CREATE VIEW to public; grant CREATE SYNONYM to public;
drop role func_user;
create role func_user not identified;
grant ALTER SESSION to func_user; grant CREATE SESSION to func_user; grant CREATE SYNONYM to func_user; grant CREATE DATABASE LINK to func_user;
drop role appl_dev;
create role appl_dev not identified;
grant func_user to appl_dev;
grant tkprofer to appl_dev;
grant CREATE CLUSTER to appl_dev; grant CREATE PROCEDURE to appl_dev; grant CREATE ROLE to appl_dev; grant CREATE SEQUENCE to appl_dev; grant CREATE SNAPSHOT to appl_dev; grant CREATE TABLE to appl_dev; grant CREATE TRIGGER to appl_dev; grant CREATE VIEW to appl_dev; grant FORCE TRANSACTION to appl_dev;
drop role sys_mgr;
create role sys_mgr not identified;
grant appl_dev to sys_mgr;
grant CREATE PUBLIC DATABASE LINK to sys_mgr; grant DROP PUBLIC DATABASE LINK to sys_mgr; grant CREATE PUBLIC SYNONYM to sys_mgr; grant DROP PUBLIC SYNONYM to sys_mgr;
--
X-no-archive:yes
Received on Sun May 31 1998 - 09:30:18 CDT
![]() |
![]() |