Roberto -
db_permitted_multirow doesn't currently exist, but I was suggesting it should. In general, Oracle specific sql should be hidden behind functions like these that take 'standard' SQL (in this case the select without the pl/sql call where clause). The aD versions of these functions still call the Oracle specific stuff - in this case they just tag the extra where clause on the end and send it off. But OpenACS can do its own thing. This is kind of like what you say about the utility of db_sysdate etc. - that sort of thing could be enforced across the whole codebase. calls to ns_ora and use of bind variables could be hidden behind this layer too.
