Why Don’t Roles Work in Definer Rights PL/SQL
Why Don’t Roles Work in PL/SQL? In this tutorial, Oracle Certified Master DBA John Watson will explain and demonstrate that it is an architectural issue that prevents roles from working in a definer rights stored PL/SQL program (procedure or function). You’ll learn that PL/SQL is a statically compiled language and it does not know what roles would be enabled at runtime. So, it is as if SET ROLE NONE were issued – all roles are disabled for the procedure. You will also learn there are alternatives (including Invokers Rights code) and 12c enhancements (control of privilege inheritance and Granting roles to procedures).
This free Oracle PL/SQL training is segmented into several separate lessons:
- Lesson 1 – Understanding the Problem (1:42) (click on video below)
- Lesson 2 – A Demonstration (5:05)
- Lesson 3 – Alternatives, Solutions (1:50)
Date: Jul 12, 2016
NOTE: Some corporate firewalls will not allow videos hosted by YouTube.