> It seems that I have to use the sysdba/masterkey password in
> order to change a users password but that means I can't let
> my users change their own passwords!

This is correct and a real PITA. Different people handle this in
different ways. What I do is...

I grant update update access to PUBLIC on the password field (only) of
the USERS table in ISC4.gdb. I then setup a BEFORE UPDATE trigger on
this table that does something along the lines of...

IF (USER <> 'SYSDBA') THEN BEGIN
IF (USER <> OLD.USER_NAME) THEN
EXCEPTION CANNOT_CHANGE_OTHERS_PWD;
END


Obviously there are variations on this theme depending on how
sophisticated you want to get.

HTH

Geoff Worboys
Telesis Computing