Which two statements are true when you execute an invoker’s rights procedure?

Which two statements are true when you execute an invoker’s rights procedure?

Which two statements are true when you execute an invoker’s rights procedure?

A.
The owner must have the INHERIT PRIVILEGES object privilege on the invoking user, or the
INHERIT ANY PRIVILEGES privilege.

B.
Invoking users can control who can access their privileges when they run an invoker’s rights
procedure.

C.
The calling user must be granted the INHERIT PRIVILEGES object privilege on the user owner
of the procedure.

D.
The calling user must grant the INHERIT PRIVILEGES object privilege on the user owner of the
procedure.

Explanation:
http://docs.oracle.com/cd/E16655_01/network.121/e17607/dr_ir.htm#DBSEG661



Leave a Reply 1

Your email address will not be published. Required fields are marked *


Sunil Vora

Sunil Vora

ANS: A,B
http://docs.oracle.com/database/121/DBSEG/dr_ir.htm#DBSEG658

How the INHERIT [ANY] PRIVILEGES Privileges Control Privilege Access
The INHERIT PRIVILEGES and INHERIT ANY PRIVILEGES privileges regulate the privileges used when a user runs an invoker’s rights procedure or queries a BEQUEATH CURRENT_USER view that references an invoker’s rights procedure.
When a user runs an invoker’s rights procedure, Oracle Database checks it to ensure that the procedure owner has either the INHERIT PRIVILEGES privilege on the invoking user, or if the owner has been granted the INHERIT ANY PRIVILEGES privilege. If the privilege check fails, then Oracle Database returns an “ORA-06598: insufficient INHERIT PRIVILEGES privilege” error.
The benefit of these two privileges is that they give invoking users control over who can access their privileges when they run an invoker’s rights procedure or query a BEQUEATH CURRENT_USER view.