Thanks again Florian for your quick answer!
regarding repo stored procs: I only used the UI so far and could not find any option to set scalar output parameters there and until now I thought it is not possible to create them using plain SQL - I will give it a try!
The guide says that you can grant access to all values using GT or CP with either " " or "*", but there is no similar return value for e.g. IN according to the guide.
so the GT was just a workaround that I was thinking of. The actual problem is that I did not want to return all values which I assume has performance drawbacks?
according to the guide "... filter conditions to be determined dynamically in runtime ..." - does this mean at query time? for every query (over and over again) or only for the first query in the session(?) and cached afterwards?
I'd still think that omitting a security restriction in case a user is allowed to see all data would yield better performance?
thanks,
-gerhard