Vlad Khorsun wrote:

>>> Here we have a real problem - we must define and check privileges for
>>> CREATE DATABASE at engine instance level.
>>>

Agreed. But not necessary, see below.

>> I don't understand this. Why is this necessary?
>>
>
> Alex gave the exact reason - without CREATE DATABASE privilege
> any user might create its own database, register there any dangerous
> external procedure and execute it.

The trusted/non-trusted setting allows database owner to register or
grant language usage only for trusted languages.

Non-trusted languages is work (grant usage with/without grant option)
for SYSDBA.


Adriano