Authorization Consideration

Security for dynamic SQL is evaluated at runtime using the privileges of the user who calls the SQL procedure, rather than the person who builds the SQL procedure. For any dynamic SQL that you use, ensure that the user calling the SQL procedure will have the proper privileges. For more information on how security is resolved, see Appendix E, "Security Considerations in SQL Procedures."