It would be nice if there was an init.ora (even an underscore one) or package setting that controlled this, so we could decide on the behavior as there are many systems where roles are never turned on or off in middle of a session. I would guess that is the case in 95+% of databases. Oracle lets us configure almost everything else, even very rarely used ones such as isolation level so I'd think there have to be a better reason. Ken From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of Andre van Winssen Sent: Monday, December 20, 2010 12:43 PM To: Chris.Stephens@xxxxxxx Cc: ORACLE-L Subject: Re: roles + pl/sql roles can be enabled or disabled anytime in a session (set role..). What is oracle supposed to do when the owner of a plsql object that needed the role for the required objects privs unsets a role, should it invalidate that plsql object, when someone else might be using it? it is a conscious oracle kernel developer decision to do it this way and it makes sense to me. Regards, Andre 2010/12/20 Stephens, Chris <Chris.Stephens@xxxxxxx> I just went through the 'roles are not active in pl/sql' speech with a developer. His response was that someone at Oracle really needs to fix that. My first reaction was 'I'm sure there is a very good reason for it to be that way' but I can't really think of why it is that way. Are roles disabled in pl/sql for some reason other than that's just the way oracle implemented it? chris CONFIDENTIALITY NOTICE: This message is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient or the employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by email reply.