SESAM/SQL provides the EXECUTE privilege for routines. It is assigned using the SQL statement GRANT and revoked using the SQL statement REVOKE.
When a routine is created, the current authorization identifier must have the EXECUTE privilege for the routines called directly in the routine. It must also, for all tables and columns which are addressed in the routine, have the privileges which are required to execute the DML statements contained in the routine.
When a view is created, the current authorization identifier must have the EXECUTE privilege for the UDFs called directly in the view.
The EXECUTE privilege for the routine to be executed is required to execute a routine (with the SQL statement CALL or using a function call), but not the privileges which are required to execute the DML statements contained in the routine. In addition, the SELECT privileges for the tables which are addressed in the routine’s call parameters by means of subqueries are required.