Gentlemen, there is clearly no agreement on the requirements for
security around external procedures. Rather than try to agree on
language or implementation, I suggest you go back and restate (and
eventually agree on) the security requirements for external procedures.
These should include a) what we are trying to protect against and b)
what controls are necessary, and c) who should have the controls.

If you can't agree on this, there is no point to the rest of the
discussion. Once you do agree, you have something to evaluate proposals
against.

--
James Starkey, Senior Software Architect
MySQL Inc., Manchester, MA, USA, www.mysql.com
Office: 978 526-1376