OCP-1Z0-052-V8.02-183题

183. The HR user creates a stand-alone procedure as follows and grants the EXECUTE privilege on the procedure to many database users: 

CREATE OR REPLACE PROCEDURE create_dept ( v_deptno NUMBER, v_dname VARCHAR2, v_mgr NUMBER, v_loc NUMBER) 

BEGIN 

INSERT INTO hr.departments VALUES (v_deptno, v_dname, v_mgr, v_loc);

END; 

The users having permission to execute the procedure are able to insert records into the DEPARTMENTS

table even though they do not have the INSERT privilege on the table. You want only those users who

have privileges on the DEPARTMENTS table to be able to execute the procedure successfully.

What would you suggest to the PL/SQL developers to achieve this? 

A.Create the procedure with definer's right.

B.Create the procedure with invoker's right.

C.Grant the EXECUTE privilege with GRANT OPTION on the procedure to selected users. 

D.Create the procedure as part of a PL/SQL package and grant the EXECUTE privilege on the package

to selected users.

Answer: B  

答案解析：

参考：http://blog.csdn.net/rlhua/article/details/12652569

用户有执行procedure 的权限以至于能够把记录插入到DEPARTMENTS，即使这些用户没有插入DEPARTMENTS表的权限。

你只想只有能够插入DEPARTMENTS表的数据的那些用户执行procedure 成功。

有什么建议来实现？

PL/SQL  还提供的数据保护功能。 调用方不必知道要读取或处理的数据结构便可进行调用。

另外，调用方不必具有访问这些对象的权限，只需要具有执行PL/SQL  程序的权限就足够了。

可以选择使用另一种模式的权限来调用PL/SQL，这种情况下， 调用方必须有权执行 调用程序运行期间执行的每个语句。