Introduction

In this section, you will learn the definitions of concepts that will be used in the rest of the chapter.

Definer is the owner of a procedure.

Invoker is a user who uses (invokes) a procedure, but is not the definer of the procedure.

Definer's rights procedure is a procedure (or a program unit) that executes with the privileges of its definer.

Invoker's rights procedure is a procedure (or a program unit) that executes with the privileges of the invoker.

Note

Another difference between definer's and invoker's rights procedures is that invoker's rights procedures are not bound to the schema in which they are located.

Code base access control is a new feature, introduced in Oracle Database 12c. It enables you to grant database roles to PL/SQL functions, procedures, or packages. You can use it with definer's and invoker's rights procedures.

The purpose of the accessible by clause is to limit the calling set of program units to be those in the ...