Cursor query retrieves records in anon pl/sql block but no data in store pr

Question

Hello,
Can any one please help me,
I am using the below query, to get the table name and constraint name
select table_name,constraint_name
from all_constraints
where constraint_type in ('R','P')
and status = 'ENABLED'
and owner='IRIS_DATA'
order by constraint_type desc;
The below query retrieves data in anonymous pl/sql block and retrieve no data when i use the same cursor with the same query in procedure inside the package.
CREATE USER CLONEDEV
IDENTIFIED BY CLONE123
DEFAULT TABLESPACE IRIS
TEMPORARY TABLESPACE TEMP;
GRANT DBA TO CLONEDEV;
the user from which i am executing this query is granted dba role.
My oracle version is 10.2.0.4
Please update if you any other information.
Please advice.
Thanks

Answer 1

>
Roles cannot be used by pl/sql.
>
NOT TRUE!
That is an oft quoted myth. There are many posts in the forum that mis-state this.
Roles can be, and are used by PL/SQL. In fact, OP stated and demonstrated that in their question: their anonymous block worked.
The Oracle docs provide a very clear explanation - the core restriction is for NAMED PL/SQL blocks that use DEFINER's rights (the default):
>
Roles Used in Named Blocks with Definer's Rights
All roles are disabled in any named PL/SQL block (stored procedure, function, or trigger) that executes with definer's rights. Roles are not used for privilege checking and you cannot set roles within a definer's rights procedure.
>
The Database Security Guide has the information in the section 'How Roles Work in PL/SQL Blocks (which, of course, wouldln't be needed if they didn't work. ;) )
http://docs.oracle.com/cd/B28359_01/network.111/b28531/authorization.htm#i1007304
>
The use of roles in a PL/SQL block depends on whether it is an anonymous block or a named block (stored procedure, function, or trigger), and whether it executes with definer's rights or invoker's rights.
Roles Used in Named Blocks with Definer's Rights
All roles are disabled in any named PL/SQL block (stored procedure, function, or trigger) that executes with definer's rights. Roles are not used for privilege checking and you cannot set roles within a definer's rights procedure.
The SESSION_ROLES view shows all roles that are currently enabled. If a named PL/SQL block that executes with definer's rights queries SESSION_ROLES, then the query does not return any rows.
See Also:
Oracle Database Reference
Roles Used in Named Blocks with Invoker's Rights and Anonymous PL/SQL Blocks
Named PL/SQL blocks that execute with invoker's rights and anonymous PL/SQL blocks are executed based on privileges granted through enabled roles. Current roles are used for privilege checking within an invoker's rights PL/SQL block. You can use dynamic SQL to set a role in the session.