Woody wrote:

> OK, guess I'm just ignorant when it comes to web apps, but why would
> anyone but the owner have access to the actual database?

Problem with Firebird's security is that any user can connect (no matter
whether you are owner or not) to any database and create objects in it.

> Isn't
> everything else provided by a front end that only interacts with the db
> in the background?

Users can easily upload their own frontend to the webspace and access
through there. Take MySQL example: you (=hosting provider) can setup
PhpMyAdmin for your users and do all the restrictions and such, but any
user can upload their own copy of PhpMyAdmin into their webspace (so
it's just like another web app. they are using) and access any database
on the disk (provided they know the alias name/path).

--
Milan Babuskov
http://www.flamerobin.org