Implement Code Based Access Control for managing framework tables access #1370
Unanswered
jgebal
asked this question in
Feature Requests
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Problem or motivation
AUTHID CURRENT USER packages currently rely on the invoking schema's privileges. The framework is relying on it's own tables. Those tables should not be visible publicly.
Currently, separate packages are used for operating on framework internal tables.
Proposed solution
With introduction of Code-Based Access Control in Oracle 12.1 there is no need for having separate packsges anymore.
So the direction would be to review all the package that access the framework internal tables and remove the separate packages where applicable.
The removed packages should be fully integrated into the existing authid current-user framework packages or types.
All the existing functional behavior should remain the same.
The main change will be the maintainability, readability and potentially better performance of the executed code.
Alternatives or workarounds considered
No response
Framework area
Other
utPLSQL version you are using
No response
All reactions