anchor.diff:                  true ->     AccountId;
                   false ->    false
               end
  -    end,
  -    case Owner of
  +    end.
  +
  +init_create_index(SKey,Table,IndexDefinition) ->
  +    case authorized_table_create_owner(SKey,Table) of
  +        false ->
  +            ?SecurityException({"Create index unauthorized", {Table,SKey}});
  +        Owner ->
  +            case have_table_permission(SKey, Table, select) of
  +                true ->     imem_meta:init_create_index(Table, IndexDefinition);
  +                false ->    ?SecurityException({"Create index on table unauthorized", {Table,SKey}})
  +            end
  +    end.
  +
  +create_index(SKey,Table,IndexDefinition) ->
  +    case authorized_table_create_owner(SKey,Table) of
  +        false ->
  +            ?SecurityException({"Create index unauthorized", {Table,SKey}});
  +        Owner ->
  +            case have_table_permission(SKey, Table, select) of
  +                true ->     imem_meta:create_index(Table, IndexDefinition);
  +                false ->    ?SecurityException({"Create index on table unauthorized", {Table,SKey}})
  +            end
  +    end.
  +
  +create_or_replace_index(SKey,Table,IndexDefinition) ->
  +    case authorized_table_create_owner(SKey,Table) of
           false ->
               ?SecurityException({"Create index unauthorized", {Table,SKey}});
           Owner ->
  
positive.code: -export([ create_table/4
          , create_check_table/4
          , create_sys_conf/2
          , create_or_replace_index/3
  		, drop_table/2
          , drop_index/2
          , drop_index/3
  
negative.code:             imem_meta:create_sys_conf(Path)
      end.
  
  authorized_table_create_owner(SKey,Table) ->
      #ddSeCo{accountId=AccountId} = seco_authorized(SKey),
      case if_is_system_table(SKey, Table) of
          true ->     
              system;
          false ->    
  