动态DDL执行与Schema Objects显示授权问题

发布: 2009-10-16 10:32 | 作者: 不详 | 来源: 领测软件测试网采编 | 查看: 12次 | 进入软件测试论坛讨论

动态DDL执行与Schema Objects显示授权问题 软件测试工具

关键字：DDL Schema Objects 显示授权

　　这是一个大家常见的问题,也是很容易忽略的问题,尤其是在Procedure里面动态执行DDL语句的时候发生. 我们必须使用显示授权方式来保证DDL的执行权限, 而不能通过role的传递方式,下面是一个简单的测试过程来验证这一点.

　　参考说明:

　　If the referenced item is indeed declared and you believe that you have privileges to refer to that item, check the privileges; if the privileges were granted only via a role, then this is expected and documented behavior. Stored objects (packages, procedures, functions, triggers, views) run in the security domain of the object owner with no roles enabled except PUBLIC. Again, you will be notified only that the item was not declared

　　Test steps:

　　SQL> create user chris identified by pass;

　　User created.

　　SQL> grant dba to chris;

　　Grant succeeded.

　　SQL> connect chris/pass;

　　Connected.

　　SQL> create table test1 (name varchar2(10));

　　Table created.

　　--Success here.

　　SQL> drop table test1;

　　Table dropped.

　　SQL> create or replace procedure chris_cr_tbl

　　2 IS

　　3 begin

　　4 execute immediate 'create table test1 (name varchar2(10))';

　　5 end;

　　6 /

　　Procedure created.

　　SQL> exec chris_cr_tbl;

　　BEGIN chris_cr_tbl; END;