SQL queries given to
the SQL proxy can either create or query SPD resources. Complex SQL
queries can query resources from multiple librefs that have different
user credentials. As a result, the SQL proxy creates its own user
proxy, called the SQL user proxy, to access resources for the SQL
query.
SQL user proxies have
either credentials for IP=YES librefs for implicit SQL, or credentials
for LIBGEN=YES librefs for explicit SQL. The credentials include the
following:
-
-
the user’s SPD Server group name
-
the user’s ACLSPECIAL privileges
If there are multiple IP=YES or LIBGEN=YES librefs that have the same user credentials,
the librefs share the same SQL user proxy. Any SPD Server resources (such as tables
and views) that are accessed by the SQL proxy are authorized
access based on the credentials of the SQL user proxy that is currently servicing
that LIBNAME.