Dmitry, Helen,

>>The question is not whether it can be done at the execution time but whether
>>it should be. IIRC, the SQL spec explicitly requires permissions to be
>>checked at the prepare time. And it makes a lot of sense to me.

H> Me too. I've been really struggling to understand why it would ever be
H> necessary (or even rational) to defer authorisation until execution
H> time.

two things come to mind:

1) to be able to cache prepared statements across different
transactions/connections/users.
2) to implement row-level security.

Ciao
--
Nando Dessena
http://www.flamerobin.org