When Federation Server SQL Authorization Enforcement is enabled, the FedSQL driver
is enabled, and the SQL dialect is automatically set to FedSQL. With FedSQL an additional
layer of object-level security is enabled for the connection and SQL statements are
secured before processing them. If Federation Server SQL Authorization Enforcement
is disabled, object-level security is bypassed and the user is granted all privileges
regardless of what the user has been granted or denied.
When Federation Server SQL Authorization Enforcement is disabled in SAS Federation
Server Manager, an administrator
has the option to choose native dialect, which is the dialect of the underlying data
source. For example, if you are connected to Oracle, then the native dialect would
be SQL supported by Oracle.
To disable Federation Server SQL Authorization Enforcement using administration DDL,
include
FEDSQL=NO
in
the
CREATE DSN statement to default to native dialect.