Oracle 12c PL/SQL Security Free Oracle Database Tutorial
Historically, we had definer's rights and invoker's rights. Definer's rights code lets the invoker escalate his privileges, invoker's rights code lets the definer escalate his privileges. Big problem! And the use of roles complicated things further. We have all been caught out by misunderstanding how roles are applied (or not) within PL/SQL. Oracle 12c tidies this up, with the INHERIT [ANY] PRIVILEGE privilege, and the ability to grant roles to program units. It is enabled by default, so make sure you understand it.
Presented by Oracle Certified Master John Watson, SkillBuilders' Director of Oracle Database Services.
This free Oracle 12c PL/SQL Security tutorial is segmented into several separate lessons:
|