Grant role and make it default

Question

Hello all,
I'm facing an awkward situation whit the grant command.
Let's say we have a user some_owner that is granted the role some_role with admin option.
We have a procedure owned by some_owner as follows:
CREATE PROCEDURE "+some_owner"."GRANT_ROLE"
(P_USER IN VARCHAR2
BEGIN
EXECUTE IMMEDIATE 'GRANT some_role TO ' ||UPPER(P_USER);
END;
A user some_user who has execute privilege on the procedure is able to successfully execute the procedure using SQL+ and the role some_role is granted (default = Y) to the user.
However, when the procedure is called from a 10g form, the role is granted (default =N)
Have you ever faced a similar situation?
Thanks in advanse
Joseph

Answer 1

Test first post second.
SQL> CREATE USER john identified by john;
User created.
SQL> GRANT oem_monitor TO john;
Grant succeeded.
SQL> SELECT granted_role,default_role
  2  FROM dba_role_privs
  3  WHERE grantee = 'JOHN';
GRANTED_ROLE                   DEF
OEM_MONITOR                    YES
SQL> GRANT hs_admin_role TO john;
Grant succeeded.
SQL> SELECT granted_role,default_role
  2  FROM dba_role_privs
  3  WHERE grantee = 'JOHN';
GRANTED_ROLE                   DEF
HS_ADMIN_ROLE                  YES
OEM_MONITOR                    YES
SQL> GRANT finrep TO john;
Grant succeeded.
SQL> SELECT granted_role,default_role
  2  FROM dba_role_privs
  3  WHERE grantee = 'JOHN';
GRANTED_ROLE                   DEF
FINREP                         YES
HS_ADMIN_ROLE                  YES
OEM_MONITOR                    YES
SQL> ALTER USER john DEFAULT ROLE ALL EXCEPT finrep;
User altered.
SQL> SELECT granted_role,default_role
  2  FROM dba_role_privs
  3  WHERE grantee = 'JOHN';
GRANTED_ROLE                   DEF
FINREP                         NO
HS_ADMIN_ROLE                  YES
OEM_MONITOR                    YES
SQL> REVOKE hs_admin_role FROM john;
Revoke succeeded.
SQL> GRANT dba TO john;
Grant succeeded.
SQL> SELECT granted_role,default_role
  2  FROM dba_role_privs
  3  WHERE grantee = 'JOHN';
GRANTED_ROLE                   DEF
DBA                            YES
FINREP                         NO
OEM_MONITOR                    YESGranting or revoking roles has no effect on other existing roles. A granted role is always a default row unless you tell Oracle otherwise.
TTFN
John