Controls whether the external login credentials of the session user or the executing (effective) user are used when making remote connections. This option is provided for backwards compatibility. For security reasons, do not specify this option.
Login_user, Effective_user
Effective_user
PUBLIC role | For current user | For other users | |
---|---|---|---|
Allowed to set permanently? | Yes, with SET ANY SECURITY OPTION | No | No |
Allowed to set temporarily? | Yes, with SET ANY SECURITY OPTION | No | No |
This option specifies whether remote data access connections are performed using the external login credentials of the session user or the current executing user. The session user is the user who is connected; whereas the current executing user can be different based on stored procedure calls.
When Login_user is specified, the database server always uses the session user's external login credentials when making remote data access connections, regardless of what the current executing user is.
When Effective_user is specified, the database server respects the setting of the current executing user. Remote connections are made based on the external login credentials of the current executing user. Specifying Effective_user can result in multiple (one per current executing user) remote connections for the same local connection.