QUESTION 64

In your multitenant container database (CDB) containing pluggable database (PDBs), t he HR user executes the following commands to create and grant privileges on a procedure:

CREATE OR REPLACE PROCEDURE create_test_v

(v_emp_id NUMBER, v_ename VARCHAR2, v_SALARY NUMBER, v_dept_id NUMBER) IS BEGIN

INSERT INTO hr.test VALUES (V_emp_id, V_ename, V_salary, V_dept_id); END;

GRANT EXECUTE ON CREATE_TEST TO john, jim, smith, king;

How can you prevent users having the EXECUTE privilege on t he CREATE_TEST procedure from inserting values into tables on which they do not have any privileges?

A. Create the CREATE_TEST procedure with definer's rights.

B. Grant the EXECUTE privilege to users with GRANT OPTION on t he CREATE_TEST procedure.

C. Create the CREATE_TEST procedure with invoker's rights.

D. Create the CREATE_TEST procedure as part of a package and grant users the EXECUTE privilege the package.

Correct Answer: C

Section: (none) Explanation: 題目的意思是創(chuàng)建了一個存儲過程，需要有其它用戶能夠執(zhí)行這個存儲過程，可是他們沒有權限對存儲過程中訪問到的表沒有訪問權限，但是這些用戶又要能夠執(zhí)行這個存儲過程，所以如果是 definer's rights 的話，執(zhí)行就會出錯，因為該模式下只能對HR.DEPARTMENTS 的表進行操作;可能的情況下是這些用戶自己有跟 HR 用戶相同的表名字也叫DEPARTMENTS，所以當執(zhí)行這個存儲過程的時候，修改的是自己的表，可以實現(xiàn)一個存儲過程被多個用戶共享，但是修改的卻是各自用戶下的自己的表，這時候需要invoker's rights來實現(xiàn)