Subject Is this true? Can steal GDB file image using an external table.
Author toni_martir
>>>>>>>
Jan Henrik Sylvester reported this on
borland.public.interbase.general.

Connect to a DB and create an external table with the same name as
the GDB itself and one integer column:

CREATE TABLE THE_GDB EXTERNAL
FILE 'C:\Borland\InterBase\Examples\Database\Employee.gdb' (
INT_VALUE INTEGER );

Now write a program which selects from this table and writes the
integer values to a file. You'll have a byte-for-byte copy of the
GDB.

One would think that the blind_meta.sql script should prevent users
from creating tables, but even after running this script I can still
create tables as a non-SYSDBA/owner IB user.

This completely defeats the point of using OS security to protect the
GDB file.

>>>>>>>>>

Anyone tested it?
Any workarounds?

Thanks