After an SPL program begins execution, any attempt to access a database object from within the program results in a check to ensure the current user has the authorization to perform the intended action against the referenced object.

Privileges on database objects are respectively bestowed and removed by using the GRANT and REVOKE statements. If the current user attempts unauthorized access on a database object, the program will throw an exception.