granting execute on stored procedure

  • From: "Sheehan, Jeremy" <JEREMY.SHEEHAN@xxxxxxxxxxxxxxxxx>
  • To: Oracle-L Freelists <oracle-l@xxxxxxxxxxxxx>
  • Date: Mon, 26 Jan 2015 18:55:35 +0000

Hello,

I’m working with our compliance officer on how to respond to a question posed 
to us by Internal Audit (helloooo Audit Season!).

What we’re looking at is execute privs that have been granted to some users.  
We found quite a few stored procedures that have been granted to some users, 
but I’m unclear if these will actually make a different or not due to invoker 
rights.

My question is this.  If a stored procedure is created without using AUTHID 
CURRENT_USER/DEFINER, it runs as the SCHEMA OWNER, correct?

Please let me know and thanks in advance,

Jeremy

Other related posts: