Invokers/definers rights

[Guest_imported]

Please help me!
I have been struggling with this. It seems
the more I read the more I get confused.
Can someone please explain to me in a detailed
simplified manner how the invokers/definers rights work.
How they differ and if possible, some examples.
thanks,
laponte

 

[carp]

If you create a procedure with owner's rights and then grant execute on it to another user, whenever that user executes the procedure, they inherit your privileges.
If you create a procedure with invoker's rights and grant execute on it to another user, whenever they execute it they do so with THEIR privileges.

Example:

User A and User B have INSERT privileges on the scott.emp table. User C does not.

User A builds a procedure that uses owner's rights to insert a row into the emp table and grants execute privileges to User C. User C successfully uses this procedure to insert a row into the table (using User A's privileges).

User B builds a similar procedure, only it uses invoker's rights. User B likewise grants execute privileges to User C. User C tries running this procedure, but an exception is raised; User C does not have INSERT privileges on the emp table. Therefore, the procedure fails.

 

[Guest_imported]

great!
Atleast I can assure you that invokers rights explanation is very profound but definers rights is not.
Is definers rights same as owners rights?
I told you this part of oracle 8i pl/sql is not sinking in.
laponte.

 

[carp]

Sorry for the confusion. Yes, definer's rights can be considered synonymous with owner's rights. There may be a very fine distinction that I'm not aware of, but so far the two terms seem to be interchangeable.