> Hi,
>
> where do I control which e-mails have the right to do MAIL-MERGE jobs
> using a SQL-query?

Authority to allow all MAIL-MERGE jobs is controlled via email address and
password. The sending address of the job itself  must be a
DIST_ALLOWED_USER=  or  POSTMASTER=  and the job must contain the proper
PW=xxxxxx  statement.

If the job itself passes the security checks, LISTSERV executes the job
whether the data is from a List, DBMS or external data provided in the
job.