Hi,

>If you follow Martijns advise, you can store username/passw
>in your database/outside isc4.gdb and need a process/service/program
>that substitude application's username/passw. combination with *real*
>IB/FB ones.
>It's a security issue to do it. Advantage: User never knows its real
>IB username/passw combination. Drawback: USER variable will provide an
>improper name (if you use prefix/postfix). I only substitute password
>with a unique one.

One solution to the USER in procedures and triggers would be a procedure/UDF
that takes a string as a parameter, removes the prefix/postfix and returns
the 'clean' user name... Just a thought.

Martijn Tonies
InterBase Workbench - the developer tool for InterBase and Firebird
http://www.interbaseworkbench.com


[Non-text portions of this message have been removed]