IN values in a PL/SQL procedure

Question

Hi Experts,
Please can someone help me with this procedure ? I am trying to write this procedure that I can use to grant privileges dynamically to roles based on the argument.
I am getting the errors while creating it as it fails to assign the values in the CASE statement based on the IN arguments.
CREATE OR REPLACE PROCEDURE GENERATE_GRANTS (OWNNAME IN VARCHAR2, ROLENAME IN VARCHAR2, OP_TYPE VARCHAR2)
AS
SQL_STATEMENT      VARCHAR2 (200);
err_code      number(10);
err_msg      VARCHAR2(200);
OBJTYPES      VARCHAR2(200);
BEGIN
CASE OP_TYPE
WHEN 'READ'           THEN OBJTYPES := ( 'TABLE', 'VIEW');
WHEN 'READWRITE'      THEN OBJTYPES := ( 'TABLE', 'VIEW', 'SEQUENCE', 'PROCEDURE', 'PACKAGE','FUNCTION' );
END CASE;
FOR ITEM IN (SELECT (
     decode(
     object_type,
     'TABLE','GRANT SELECT, INSERT, UPDATE, DELETE ON '|| OWNNAME ||'.',
     'VIEW','GRANT SELECT ON '||  OWNNAME ||'.',
     'SEQUENCE','GRANT SELECT ON '|| OWNNAME ||'.',
     'PROCEDURE','GRANT EXECUTE ON '|| OWNNAME ||'.',
     'PACKAGE','GRANT EXECUTE ON '|| OWNNAME ||'.',
     'FUNCTION','GRANT EXECUTE ON'|| OWNNAME ||'.' )||object_name||' TO '||ROLENAME
     ) as GRANT_SQL
     FROM dba_objects
     WHERE OWNER = OWNNAME
     AND OBJECT_TYPE IN OBJTYPES     
     ORDER BY OBJECT_TYPE)
LOOP
SQL_STATEMENT := ITEM.GRANT_SQL;
BEGIN
EXECUTE IMMEDIATE SQL_STATEMENT;
EXCEPTION
WHEN OTHERS
THEN -- handles all other errors
err_code := SQLCODE;
err_msg := substr(SQLERRM, 1, 200);
DBMS_OUTPUT.PUT_LINE (SQL_STATEMENT);
DBMS_OUTPUT.PUT_LINE (err_code || ' ' || err_msg);
END;
END LOOP;
END;
/

Answer 1

a) Your CASE statement has wrong syntax.
b) In order to use OBJECTTYPES the way you wanted would require dynamic SQL.
Use this instead:
CREATE OR REPLACE
  PROCEDURE GENERATE_GRANTS(
                            OWNNAME IN VARCHAR2,
                            ROLENAME IN VARCHAR2,
                            OP_TYPE VARCHAR2
    AS
    BEGIN
        FOR ITEM IN (
                     SELECT  decode(
                                    object_type,
                                    'TABLE','GRANT SELECT, INSERT, UPDATE, DELETE ON '|| OWNNAME ||'.',
                                    'VIEW','GRANT SELECT ON '||  OWNNAME ||'.',
                                    'SEQUENCE','GRANT SELECT ON '|| OWNNAME ||'.',
                                    'PROCEDURE','GRANT EXECUTE ON '|| OWNNAME ||'.',
                                    'PACKAGE','GRANT EXECUTE ON '|| OWNNAME ||'.',
                                    'FUNCTION','GRANT EXECUTE ON'|| OWNNAME ||'.'
                                   ) || object_name || ' TO '||ROLENAME AS GRANT_SQL
                       FROM  dba_objects
                       WHERE OWNER = OWNNAME
                       AND 1 = CASE
                                 WHEN OP_TYPE = 'READ' AND OBJECT_TYPE IN ('TABLE','VIEW') THEN 1
                                 WHEN OP_TYPE = 'READWRITE' AND OBJECT_TYPE IN ('TABLE','VIEW','SEQUENCE','PROCEDURE','PACKAGE','FUNCTION') THEN 1
                               END
                       ORDER BY OBJECT_TYPE
          LOOP
            BEGIN
                EXECUTE IMMEDIATE ITEM.GRANT_SQL;
              EXCEPTION
                WHEN OTHERS
                  THEN -- handles all other errors
                    DBMS_OUTPUT.PUT_LINE (ITEM.GRANT_SQL);
                    DBMS_OUTPUT.PUT_LINE (SQLCODE || ' ' || substr(SQLERRM, 1, 200));
            END;
        END LOOP;
END;
/SY.