Re: Validating dynamic SQL

From: Richard Kuhler <noone_at_nowhere.com>
Date: Sat, 14 Jun 2003 17:02:10 GMT
Message-ID: <myIGa.95432$x67.4044357@twister.socal.rr.com>

Jeremy wrote:
<snip>
> So the question is: is there an easy way to establish that the only
> objects subjected to DDL or DML in the 'dynamic' SQL is TAB1?

Create a new user that only has the limited set of privileges that you want (select on source tables + insert on TAB1). Create the procedure that executes the dynamic sql in that schema and grant execute privileges to the user(s) you want to be able to perform the dynamic sql. Remember, by default, stored procedures execute with the privileges of the user that owns them (AUTHID DEFINER).

Richard Received on Sat Jun 14 2003 - 12:02:10 CDT