User's rights

Question

Hi, I'm little confused with users rights.
USERA:
create table test
(x number
,username varchar2(10));
create or replace package pkg_test as
procedure insertToTest(p_x number, p_user varchar2);
procedure createPipe(p_name varchar2);
v_user varchar2(10);
end pkg_test as;
create or replace package body pkg_test as
procedure insertToTest(p_x number, p_user varchar2) as
begin
insert into test values(p_x, p_user);
commit;
end insertToTest;
procedure createPipe(p_name varchar2) as
v_ret number;
begin
v_ret := dbms_pipe.create_pipe(p_name);
end;
begin
select user into v_user from dual;
end pkg_test;
grant execute on pkg_test to userb;
USERB:
exec usera.pkg_test.insertToTest(1, usera.pkg_test.v_user);
exec usera.pkg_test.createPipe('test');
My question is:
I know, If userb calls first usera.pkg_test, the variable v_user is filled in with name of userb. Who in fact inserts data into usera.test table? usera or userb?
Because, If userb calls usera.pkg_test.createPipe, the owner of the pipe test is usera.
Can you explain me please?

Answer 1

user9357436 wrote:
OK, thank's for your time. I just wanted to know, who in fact inserts a data into table.That would be the session user. Always. Who else?
In your example you have a Definer's Rights procedure.
That means USERB inserts into USERA.test, and USERB does so, executing the privileges of USERA (+ PUBLIC).
Were your procedure an Invoker's Rights procedure then it would be as,
USERB inserts into USERB.test (If there were one), executing his own privileges (Incl Roles).
EDIT:
If you want a better understanding how these things work, try playing with this:
create table USERA.test(proc varchar2(5), sess_user varchar2(30), curr_user varchar2(30), curr_schema varchar2(30));
create or replace procedure USERA.dr AUTHID DEFINER
as
begin
  insert into test (proc, sess_user, curr_user, curr_schema)
  values ($$plsql_unit,
          sys_context ('USERENV', 'SESSION_USER'),
          sys_context ('USERENV', 'CURRENT_USER'),
          sys_context ('USERENV', 'CURRENT_SCHEMA'));
end dr;
grant execute on USERA.dr to PUBLIC;
create or replace procedure USERA.ir AUTHID CURRENT_USER
as
begin
  insert into test (proc, sess_user, curr_user, curr_schema)
  values ($$plsql_unit,
          sys_context ('USERENV', 'SESSION_USER'),
          sys_context ('USERENV', 'CURRENT_USER'),
          sys_context ('USERENV', 'CURRENT_SCHEMA'));
end ir;
grant execute on USERA.ir to PUBLIC;
create table USERB.test(proc varchar2(5), sess_user varchar2(30), curr_user varchar2(30), curr_schema varchar2(30));Now execute both procedures DR and IR, and do it for three different users, USERA, USERB and USERC.
Inspect what happens for each user/procedure
(Note there are no commits in the procedures, do that yourself after executing them)
Regards
Peter
Edited by: Peter on Feb 9, 2012 12:15 PM