Hi,

> > Let us suppose I have a completely pre-configured solution
> > and I don't want customers to have full access to the database.
>
> A curious scenario in the brave new world of open source :-)
>
> It was previously suggested that the ISC4.GDB was a well know
> "weakness". I would suggest that it is really a design decision made
> a long time ago. So it is not a weakness or a bug, but working as
> designed.
>
> [skip]

I agree it's not a bug. But it doesn't seem to be a right decision. I'd
prefer to have all security implemented at the database level and have a
full set of grants for system operations to drop the SYSDBA user and create
any other accounts with the administration permissions I need. That's just
my opinion, maybe I'm wrong. It was discussed in the various lists, but I
don't know exactly which security way Firebird will go.

Best regards,
Dmitry