E1 - Security model rework: CBAC for framework internals

[jgebal]

Target release or timeframe

No response

Scope and goals

Problem

AUTHID CURRENT USER packages currently rely on the invoking schema's privileges. The framework is relying on it's own tables. Those tables should not be visible publicly.
Currently, separate packages are used for operating on framework internal tables.

Proposed direction

With introduction of Code-Based Access Control in Oracle 12.1 there is no need for having separate packsges anymore.
So the direction would be to review all the package that access the framework internal tables and remove the separate packages where applicable.
The removed packages should be fully integrated into the existing authid current-user framework packages or types.
All the existing functional behavior should remain the same.
The main change will be the maintainability, readability and potentially better performance of the executed code.

Breaking change

No - only the installation process and required grants will change.

Issues tracking

• Implement Code Based Access Control for managing framework tables access utPLSQL#1370

Open questions for the community

No response