1Z0-060 · Question #52
In your multitenant container database (CDB) that contains pluggable databases (PDBs), the HR user executes the following commands to create and grant privileges on a procedure: How can you prevent…
The correct answer is C. Create the CREATE_TEST procedure with invoker's rights. If a program unit does not need to be executed with the escalated privileges of the definer, you should specify that the program unit executes with the privileges of the caller, also known as the invoker. Invoker's rights can mitigate the risk of SQL injection. Not A: By…
Question
In your multitenant container database (CDB) that contains pluggable databases (PDBs), the HR user executes the following commands to create and grant privileges on a procedure:
How can you prevent users having the EXECUTE privilege on the CREATE_TEST procedure from inserting values into tables on which they do not have any privileges?
Exhibit
Options
- ACreate the CREATE_TEST procedure with definer's rights.
- BGrant the EXECUTE privilege to users with GRANT OPTION on the CREATE_TEST procedure.
- CCreate the CREATE_TEST procedure with invoker's rights.
- DCreate the CREATE_TEST procedure as part of a package and grant users the EXECUTE privilege
How the community answered
(18 responses)- A11% (2)
- C83% (15)
- D6% (1)
Explanation
If a program unit does not need to be executed with the escalated privileges of the definer, you should specify that the program unit executes with the privileges of the caller, also known as the invoker. Invoker's rights can mitigate the risk of SQL injection. Not A: By default, stored procedures and SQL methods execute with the privileges of their owner, not their current user. Such definer-rights subprograms are bound to the schema in which they not B:Using the GRANT option, a user can grant an Object privilege to another user or to
Topics
Community Discussion
No community discussion yet for this question.