Geoff Worboys wrote:

> What I actually had in mind something more along the lines of:
> GRANT <rolename> TO PROCEDURE <procedure-name>;
> whereupon the procedure would automatically execute within
> the context of that <rolename>.

That statement is problematic since GRANT has always allowed multiple
values to be granted to the target object. If multiple roles are granted
to a procedure which should it execute under?

Better would be something like
ASSIGN <role name> TO PROCEDURE <procedure-name>;

BTW, I like your proposal a lot!