Hi guys,
I have a question about permission set.I created a new method, and after refreshing the dictionary i found that this method has been added in serveal permission sets.Could you please tell me why is it granted?
Thank you!
Solved
New method automaticly be granted
+2Best answer by durette
Database object grants are stored in two tables:
- One table stores grants for whole packages.
- One table stores revocations for package methods (procedures and functions).
To access a package method, the permission set must be granted permission on the package itself, and there must not exist a revocation for that permission set against that particular method. By default, this opens up the whole package until the methods are then individually revoked.
Since no record will exist for a new method before it’s added to a package, it will be automatically granted to any permission sets that access to the package itself.
+2anmise wrote:
From your screenshot it doesn’t look like it’s granted?
Thanks for your reply.
It has been granted in other permission sets.
I haven’t granted it after creating the new method, then it has been granted.
I want to know why it is automaticly granted.
+19Database object grants are stored in two tables:
- One table stores grants for whole packages.
- One table stores revocations for package methods (procedures and functions).
To access a package method, the permission set must be granted permission on the package itself, and there must not exist a revocation for that permission set against that particular method. By default, this opens up the whole package until the methods are then individually revoked.
Since no record will exist for a new method before it’s added to a package, it will be automatically granted to any permission sets that access to the package itself.
+2durette wrote:
Database object grants are stored in two tables:
- One table stores grants for whole packages.
- One table stores revocations for package methods (procedures and functions).
To access a package method, the permission set must be granted permission on the package itself, and there must not exist a revocation for that permission set against that particular method. By default, this opens up the whole package until the methods are then individually revoked.
Since no record will exist for a new method before it’s added to a package, it will be automatically granted to any permission sets that access to the package itself.
Thank you! It helps me a lot!
Reply
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.