Which commands are restricted in owner's rights stored procedures? (Select TWO).

In Snowflake, an owner's rights stored procedure executes with the privileges of the user who owns the procedure, not the user who calls it. To prevent potential misuse, such as privilege escalation or unauthorized information disclosure, Snowflake restricts certain commands from being executed within this type of procedure. The SHOW and DESCRIBE commands are explicitly restricted because they could be used to reveal information about objects or users that the calling role should not have access to.

B. MERGE is a standard DML command used to manipulate data and is permitted within an owner's rights stored procedure.

C. INSERT is a standard DML command used to add data to tables and is permitted within an owner's rights stored procedure.

D. DELETE is a standard DML command used to remove data from tables and is permitted within an owner's rights stored procedure.

1. Snowflake Documentation. (n.d.). Owner's Rights Stored Procedures. Retrieved from https://docs.snowflake.com/en/sql-reference/stored-procedures-owner-rights. "For security reasons, the following commands are not allowed in an owner’s rights stored procedure: ... DESCRIBE, ... SHOW."

2. Snowflake Documentation. (n.d.). Stored Procedure Security. Retrieved from https://docs.snowflake.com/en/developer-guide/stored-procedure/stored-procedures-security. "In an owner’s rights stored procedure, you cannot execute a SHOW or DESCRIBE command."