APEX_PUBLIC_USER able to perform DML that it has no privs for
607218Nov 29 2007 — edited Dec 11 2007hi -- I have an app that's using Database Account authentication.
I understand that when ApEx connects to the database, it connects
as APEX_PUBLIC_USER. But what I'm confused about is that, even
though APEX_PUBLIC_USER has not been granted any insert/update/delete
privileges, and it has not even been granted select on some tables accessed
by the application... those operations still succeed.
Clearly I'm missing something. Pointers?
Thanks,
Carol