Bryan Pendleton wrote:
have an opinion about how to invalidate all statements affected by a revoke (or grant)?A crude technique would be to simply invalidate *all* statements whenever a revoke or grant is executed.
I thought statements were already invalidated on a revoke,based upon the objects they depend on. I would not recommend a blanket approach when the mechanism to depend on specific objects already exists.
Dan.
