"Roman Rokytskyy" <rrokytskyy@...> wrote:

>
> The main question is how the permissions are determined during request
> execution. Currently this is performed during statement compilation
> and it seems that moving permission checks to the execution time
> without degrading the performance is not an easy task.

The question is not whether it can be done at the execution time but whether
it should be. IIRC, the SQL spec explicitly requires permissions to be
checked at the prepare time. And it makes a lot of sense to me.


Dmitry