Oracle7 Server Application Developer's Guide
Security
This section describes the security domain for DBMS_SQL procedures when you are using the Oracle Server or Trusted Oracle Server.
For Oracle Server Users
Any DBMS_SQL procedures called from an anonymous PL/SQL block are executed using the privileges of the current user. Any DBMS_SQL procedures called from a stored procedure are executed using the privileges of the owner of the stored procedure.
For Trusted Oracle Server Users
Any DBMS_SQL procedures called from an anonymous PL/SQL block are executed using the privileges of the current user. Any DBMS_SQL procedures called from a stored procedure are executed using the discretionary access control (DAC) and system privileges of the owner of the stored procedure and the mandatory access control (MAC) privileges of the current user.