CA Datacom SQL Security › Implementing the SQL Security Model › Binding of GRANT and REVOKE Statements

Binding of GRANT and REVOKE Statements

When an SQL Data Manipulation Language (DML) statement is compiled, the access rights needed to execute that statement are determined and put into a list in the compiled form of the statement. The objects mentioned in the statement must exist at compile time.

Data Control Language (DCL) statements (such as GRANT and REVOKE) are implemented like Data Definition Language (DDL) statements. The objects mentioned in the statement must exist at execution time but are not required to exist at compile time. This allows a GRANT statement to be in the same module with the CREATE TABLE statement when both refer to the same table.