>> From the ISP's point of view this is not security. And we talk here about ISP,
>> isn't is ?
>
> I won't argue a lot on this topic

Ok

>> While i can't agree its necessary i not object until all plugins are equal for
>> engine. Each plugin as any other application may create its objects in database.
>> If it granted to do it ;)
>
> Are you thinking something like GRANT CREATE TABLE TO PLUGIN JavaESP?

No, of course no. But when plugin will create its objects ? When its registered
by SYSDBA ? Then we need some kind of predefined event for plugin. Or on first
reference ? Then we have no guarantee that current user have necessary privileges
to create tables (plugin have no own login and can access database using current
user credentials). Also current user became owner of objects created by plugin -
i don't like it.

Regards,
Vlad