Why Don’t Roles Work in Definer Rights PL/SQL

Why Don’t Roles Work in PL/SQL? In this tutorial, Oracle Certified Master DBA John Watson will explain and demonstrate that it is an architectural issue that prevents roles from working in a definer rights stored PL/SQL program (procedure or function). You’ll learn that PL/SQL is a statically compiled language and it does not know what roles would be enabled at runtime. So, it is as if SET ROLE NONE were issued – all roles are disabled for the procedure. You will also learn there are alternatives (including Invokers Rights code) and 12c enhancements (control of privilege inheritance and Granting roles to procedures).