Is it possible to create a custom role based on SELECT_CATALOG_ROLE?

Question

I have a scenario where one user needs to see the DDL of another user:
HR schema:
CREATE OR REPLACE TYPE "HR"."CONTACT" IS OBJECT (
HOME VARCHAR2(40),
BUSINESS VARCHAR2(40)
SCOTT schema:
CREATE OR REPLACE TYPE "SCOTT"."EMPLOYEE_CONTACT" IS OBJECT (
EMP_NUMBER NUMERIC,
EMP_NAME VARCHAR2(50),
HOME HR.CONTACT,
WORK HR.CONTACT
When logged in as SCOTT, I can execute the following to get the DDL for EMPLOYEE_CONTACT:
SELECT DBMS_METADATA.GET_DDL('TYPE','EMPLOYEE_CONTACT') FROM DUAL;
but when I try to analyze it further, i.e. get the DDL for HR.CONTACT:
SELECT DBMS_METADATA.GET_DDL('TYPE','CONTACT', 'HR) FROM DUAL;
I get the following error:
13:11:59 [SELECT - 0 row(s), 0.000 secs] [Error Code: 31603, SQL State: 99999] ORA-31603: object "CONTACT" of type TYPE not found in schema "HR"
ORA-06512: at "SYS.DBMS_METADATA", line 4018
ORA-06512: at "SYS.DBMS_METADATA", line 5843
ORA-06512: at line 1
... 1 statement(s) executed, 0 row(s) affected, exec/fetch time: 0.000/0.000 sec [0 successful, 0 warnings, 1 errors]
If I grant the SELECT_CATALOG_ROLE to SCOTT, then I can get the DDL details for HR.CONTACT.
I am reluctant to recommend to my users SELECT_CATALOG_ROLE (or SELECT ANY DICTIONARY) as these permissions seem overly broad.
Is it possible to create a role that is based on SELECT_CATALOG_ROLE but limits SCOTT's ablity to get DDL to only artifacts from HR?

Answer 1

Hi Yes,
But this means you have to rebuild your list in content columns and a as a content Type.
best regards,
Paul Keijzers
Check my website http://www.kbworks.nl or follow me on
@KbWorks be sure to Check my
SharePoint-Specialist.nu for dutch informationworkers check
Wat Is microsoft SharePoint.nl for dutch readers who want to know what
microsoft office365 is.