-- subscript for initjvm.sql and ilk

-- Roles for Security - must come before create java system
begin if initjvmaux.startstep('ROLES_FOR_SECURITY') then

  initjvmaux.drp('drop role javauserpriv');
  initjvmaux.exec('create role javauserpriv');
  initjvmaux.exec('grant javauserpriv to sys');
  initjvmaux.drp('drop role javaidpriv');
  initjvmaux.exec('create role javaidpriv');
  initjvmaux.exec('grant javaidpriv to sys');
  initjvmaux.drp('drop role javasyspriv');
  initjvmaux.exec('create role javasyspriv');
  initjvmaux.exec('grant javasyspriv to sys');
  initjvmaux.exec('grant javauserpriv to javasyspriv');
  initjvmaux.drp('drop role javadebugpriv');
  initjvmaux.exec('create role javadebugpriv');
  initjvmaux.drp('drop role ejbclient');
  initjvmaux.exec('create role ejbclient');
  initjvmaux.drp('drop role jmxserver');
  initjvmaux.exec('create role jmxserver');
  initjvmaux.exec('grant jmxserver to sys');

  initjvmaux.endstep;
end if; end;
/