On 01/03/12 18:06, Vlad Khorsun wrote:
>> 03.01.2012 13:00, Alex Peshkoff wrote:
>>
>>> Not sure about current state of code (you can easily check yourself),
>>> but quite sure that UDRs should behave exactly like classical SPs, i.e.
>>> it should be possible to grant rights to them.
>> With the difference that these grants cannot be checked at the prepare 
>> time. I believe that the internal UDR queries should work exactly like 
>> EXECUTE STATEMENT WITH CALLER PRIVILEGES. Dunno however whether its 
>> already the case or still in the pipeline.
>     Who will be the CALLER if UDR function is used in SELECT statement issued 
> by
> client ? 

IMHO caller is NULL in this case :-)

> How deep in call stack we going to propagate CALLER privileges (UDR call 
> some SQL statement which have UDR calls embedded and so on) ?

May be unlimited?


------------------------------------------------------------------------------
Write once. Port to many.
Get the SDK and tools to simplify cross-platform app development. Create 
new or port existing apps to sell to consumers worldwide. Explore the 
Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
http://p.sf.net/sfu/intel-appdev
Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

Reply via email to