Have doubt in privilege granting

Question

Hi All,
We have oracle 10g database.
one of our developer wants to perform EXECUTE IMMEDIATE and DBMS_OUTPUT in his PL/SQL procedures.
Can you please help me to know what privilege i need to grant him to do this?

Answer 1

Hi,
To create procedures, the user (let's call him Owen) needs the CONNECT and CREATE PROCEDURE system privileges.
Owen needs EXECUTE privileges on any packages (including sys.dbms_output) in order to call procedures in those packages. These privileges must be granted directly to OWEN (or to the pseudo-user PUBLIC); privileges granted to some role that is, in turn, granted to Owen, won't be enough. (The system privilege EXECUTE ANY PROCEDURE is sufficient, but it can be dangerous to grant that.)
No additional privileges are needed to write a procedure that uses EXECUTE IMMEDIATE, but privileges will be needed to run the procedure.
In procedures that are created with AUTHID DEFINER (which is the default), then Owen needs whatever privileges are needed to do what the EXECUTE MMEDIATE statement does. In this case, the privilege must be granted directly to OWEN (or to PUBLIC).
In procedures that are created with AUTHID CURRENT_USER, then whoever calls the procedure (whether that is Owen or sombody else) needs the appropriate privileges. In this case, the privileges do not need to be granted directly to the user (or to PUBLIC); privileges granted via a role will work.
Does the user really need to do EXECUTE IMMEDIATE? Sometimes it's really necessary, but sometimes it not.