> But in many cases you need to retrieve generator's value
> in advance, e.g. by SP or by SELECT GEN_ID() FROM rdb$database;
> Even if user has right to call GEN_ID with only 0 or 1 increments,
> nothing stops him from calling it in endless loop
> (but maybe it is not problem with 64-bit generators)

doesn't matter. If you give rights to someone to alter data then they can
always screw it up if they so choose. It is people who you have not given
rights to that should not be able to touch it (or even read it).

Pete