Improve security for getting plans

Thanks to latest SA EBF, now is very convenient to get any actual compound query plans immediately, but I have some suggestions.

Due security reasons and for strong interface type checking, all my stored procedures divided to some independent packages with different owners.

create package dba.core_package;
create procedure dba_proc(...) at dba.core_package
grant execute dba_proc to user1;

create package user1.user_package;
create procedure user1.user_proc(...) at user_package
-- remark: user_proc calls dba_proc() within

When user1 invoke and getting plan of user1.user_proc(…),

select plan(user1.user_package.user_proc(..))

than query paln also have full statistics for dba_proc and any procedure invoked from dba_proc.

Is it possible to extend granting security rules for hiding/unhiding statistics for nested stored procedures?

SA 12.0.1.0412

product-suggestion permissions

asked 01 Apr '12, 06:27

AlexeyK77
707●6●12●24
accept rate: 8%

Graeme Perrow
9.6k●3●79●124

FWIW, the question has been given a "1stapril" tag by the author - i.e. "April Fools' Day"...

(03 Apr '12, 03:29) Volker Barth

flat view

One Answer:

1	Thanks for the suggestion, Alexey. We will investigate potential options. permanent link answered 02 Apr '12, 14:01 Glenn Paulley 10.8k●5●77●106 accept rate: 43% flat view

Your answer

toggle preview

community wiki:

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "title")
image?![alt text](/path/img.jpg "title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

Question tags:

question asked: 01 Apr '12, 06:27

question was seen: 3,288 times

last updated: 03 Apr '12, 03:29

SAP SQL Anywhere