> Certainly, we must have well defined user's rights related with defining
> external routines.

All we can (and must) to do is define and check CREATE\DECLARE\ALTER\DROP
<object> privileges at database level. All other is external to database engine and
not an our deal

> Without it we can easily return to problems, when any user
> with valid FB login may execute any code in context of firebird server. For
> example, if any user would be able to create database (becoming it's owner)

Here we have a real problem - we must define and check privileges for
CREATE DATABASE at engine instance level.

My $0.02

Regards,
Vlad