> At 08:04 2/10/2008, Alan McDonald wrote:
>
> >GRANT and REVOKE is DML not DDL so it's not a problem.
>
> Nope. DML is INSERT, UPDATE, DELETE and SELECT.
>
> GRANT and REVOKE are DDL - they cause objects to be created and
> destroyed.
>
> ./heLen
>

what objects?
When I create role, a record is inserted into RDB$ROLES
When I grant a privilege a record is inserted into RDB$PRIVILEGES (the
RDB$USER field gets a rolename or user name depending on the grant type and
the RDB$RELATION_NAME gets the value of the object being granted etc)
Isn't this DML?
If I create a table, there's also a lot of DML going on in the system tables
to achieve this but I would have thought that granting and revoking is more
like straight DML than DDL.
Alan