Which commands are restricted in owner's rights stored procedures? (Select TWO).

The correct answer is A. SHOW E. DESCRIBE. Owner's rights stored procedures execute with the privileges of the procedure owner, not the caller. Snowflake restricts schema-discovery commands - specifically SHOW (A) and DESCRIBE (E) - within owner's rights stored procedures. This restriction prevents a malicious or…

Account Access and Security

Question

Options

ASHOW
BMERGE
CINSERT
DDELETE
EDESCRIBE

How the community answered

(34 responses)

A
94% (32)
B
3% (1)
D
3% (1)

Explanation

Owner's rights stored procedures execute with the privileges of the procedure owner, not the caller. Snowflake restricts schema-discovery commands - specifically SHOW (A) and DESCRIBE (E) - within owner's rights stored procedures. This restriction prevents a malicious or unintended privilege escalation where a caller could use the procedure to enumerate database objects they otherwise lack access to see. DML commands like MERGE (B), INSERT (C), and DELETE (D) are permitted within these procedures because they operate on data the owner already has rights to, and their scope is controlled by the procedure logic.

Topics

#Stored Procedures#Owner's Rights#Command Restrictions

Community Discussion

No community discussion yet for this question.

Full COF-C02 Practice