Let group leader change his memeber's pwd without giving him 'alter user' p

Question

Hi, all
Is there any way that I can let a group leader to reset his own member's password without giving him the 'alter user' privilege ?
I know I can use following simplified procedure to allow one person to change his own password, but I am looking for a way to let leader to reset when his members forget their pwd, and the following script can't work. I also created the synonym and grant 'execute on' to him. Can someone help me on this?
Thanks in advance.
CREATE OR REPLACE PROCEDURE change_pwd ( v_username in varchar2, v_pwd in varchar2)
authid current_user
is
BEGIN
execute immediate 'alter user '||m_username||' identified by '||v_pwd ;
END ;
----

Answer 1

SQL> @example
SQL> spool capture.log
SQL> create user alladmin identified by adminall;
User created.
SQL> grant connect to alladmin;
Grant succeeded.
SQL> grant resource to alladmin;
Grant succeeded.
SQL> grant alter user to alladmin;
Grant succeeded.
SQL> create user member1 identified by No1knows;
User created.
SQL> grant connect to member1;
Grant succeeded.
SQL> create user member2 identified by No1knows;
User created.
SQL> grant connect to member2;
Grant succeeded.
SQL> create user gl1 identified by secret;
User created.
SQL> grant connect to gl1;
Grant succeeded.
SQL> grant resource to gl1;
Grant succeeded.
SQL> connect alladmin/adminall
Connected.
SQL> CREATE OR REPLACE PROCEDURE change_pwd ( v_username in varchar2)
  2  is
  3  m_username varchar2(100);
  4  v_pwd varchar2(30) := 'FUBAR1';
  5  BEGIN
  6  select user into m_username from dual;
  7  if (m_username = 'GL1')
  8  then
  9       execute immediate 'alter user '||v_username||' identified by '||v_pwd ;
10  end if;
11  END ;
12  /
Procedure created.
SQL> grant execute on change_pwd to gl1;
Grant succeeded.
SQL> connect gl1/secret
Connected.
SQL> exec alladmin.change_pwd('MEMBER1');
PL/SQL procedure successfully completed.
SQL> exec alladmin.change_pwd('MEMBER2');
PL/SQL procedure successfully completed.
SQL> connect member1/FUBAR1
Connected.
SQL> select user from dual;
USER
MEMBER1
SQL> connect member2/FUBAR1
Connected.
SQL> select user from dual;
USER
MEMBER2
SQL> exit
Disconnected from Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production
With the Partitioning, OLAP and Data Mining optionsAny more questions?