フリー問題

問題文

An app needs to create databases in the consumer account from inside a procedure that runs with restricted caller's rights. What has to happen in the consumer account?

選択肢

1. The consumer has to bind a reference of object type DATABASE, because every object the app touches in the consumer account goes through a reference.
2. An administrator has to issue a caller grant for CREATE DATABASE on the account to the application, because a restricted caller executable holds no privilege until it is explicitly allowed.
3. The consumer has to grant OWNERSHIP on an existing database to the application, because the app creates the new database as a child of one it already owns.
4. Nothing, because listing CREATE DATABASE in the manifest is what authorizes the restricted caller path for the app and the consumer only sees it as information.