Call for Oracle support & training (800) 766-1884
Free Oracle Tips

Corporate Oracle Training
Custom Oracle Training
Oracle New Features Training
Advanced Oracle DBA Classes
Oracle Tuning Courses
Oracle Tips & Tricks
Oracle Training Links
Oracle Training Links
Oracle Training Links

We are top for USA Oracle Training Clients


Free Oracle Tips


Free Oracle App Server Tips


Oracle support

Oracle training

Oracle tuning


Remote Oracle

Custom Oracle Training


  Oracle Tips by Burleson

Chapter 2 Introducti

on to Oracle Security

another user called PROGOWNER. This user does not own any tables but only the stored procedures. The table claims is owned by user CLAIM_SCHEMA. The user JUDY has permission to update the table claims but the user PROGOWNER doesn't. So when JUDY calls the procedure update_claim_amount, owned by PROGOWNER, who doesn't have the privileges to update the claims table, what should happen?

It will fail to update the table. When JUDY executes update_claim_amount, the procedure runs with the privileges of the owner of the procedure, i.e. PROGOWNER. Since PROGOWNER does not have any privileges on the claims table, the execution will fail. This is desirable.

Oracle8i introduced a new concept called invoker rights in execution. In this model, the procedure is created as follows.

create or replace procedure update_paid_claim (
  p_claim_id IN number,
  p_paid_amount IN number )
authid current_user
  update CLAIMS
  set PAID_AMOUNT = p_paid_amount

The definition of this procedure is identical to the one defined earlier, except for the line “authid current_user.” When the procedure is defined this way, a user calling

The above text is an excerpt from:

Oracle Privacy Security Auditing

The Final Word on Oracle Security


This is the only authoritative book on Oracle Security, Oracle Privacy, and Oracle Auditing written by two of the world’s leading Oracle Security experts.

This indispensable book is only


 and has an immediate download of working security scripts:


Oracle performance tuning book



Oracle performance tuning software

Oracle performance tuning software
Oracle performance Tuning 10g reference poster
Oracle training in Linux commands
Oracle training Excel


email BC:

Copyright © 1996 -  2014 by Burleson Inc. All rights reserved.

Oracle® is the registered trademark of Oracle Corporation.