Improve security for getting plans

[Former Member]

Thanks to latest SA EBF, now is very convenient to get any actual compound query plans immediately, but I have some suggestions.

Due security reasons and for strong interface type checking, all my stored procedures divided to some independent packages with different owners.

---

create package dba.core_package;
create procedure dba_proc(...) at dba.core_package
grant execute dba_proc to user1;

---

create package user1.user_package;
create procedure user1.user_proc(...) at user_package
-- remark: user_proc calls dba_proc() within

---

When user1 invoke and getting plan of user1.user_proc(…),

select plan(user1.user_package.user_proc(..))

than query paln also have full statistics for dba_proc and any procedure invoked from dba_proc.

Is it possible to extend granting security rules for hiding/unhiding statistics for nested stored procedures?

SA 12.0.1.0412

[VolkerBarth]

FWIW, the question has been given a "1stapril" tag by the author - i.e. "April Fools' Day"...

[Former Member · Accepted solution]

Thanks for the suggestion, Alexey. We will investigate potential options.