Introduction

In this section, you will learn the definitions of concepts that will be used in the rest of the chapter.

Definer is the owner of a procedure.

Invoker is a user who uses (invokes) a procedure, but is not the definer of the procedure.

Definer's rights procedure is a procedure (or a program unit) that executes with the privileges of its definer.

Invoker's rights procedure is a procedure (or a program unit) that executes with the privileges of the invoker.

Code base access control is a new feature, introduced in Oracle Database 12c. It enables you to grant database roles to PL/SQL functions, procedures, or packages. You can use it with definer's and invoker's rights procedures.

The purpose of the accessible by clause is to limit the calling set of program units to be those in the accessible by clause and the unit itself.