Enterprise Edition Home | Express Edition Home | Previous Page | Next Page   Other Syntax Segments > Statement Block >

Support for Roles and User Identity

You can use roles with SPL routines. You can execute role-related statements (CREATE ROLE, DROP ROLE, GRANT ROLE, REVOKE ROLE, and SET ROLE) and SET SESSION AUTHORIZATION statements within an SPL routine. You can also grant privileges or grant other roles to roles with the GRANT or (for Dynamic Server only) GRANT FRAGMENT statement within an SPL routine, or use REVOKE to cancel the privileges (or roles) of roles. Privileges that a user has acquired by enabling a role or by a SET SESSION AUTHORIZATION statement are not automatically relinquished after an SPL routine completes execution.

For further information about roles, see the CREATE ROLE, DROP ROLE, GRANT, REVOKE, and SET ROLE statements in Chapter 2.

Enterprise Edition Home | Express Edition Home | [ Top of Page | Previous Page | Next Page | Contents | Index ]