Subject Re: [ib-support] IB security <> FB security
Author Ann W. Harrison
At 10:23 AM 3/6/2002 +0100, Martijn Tonies wrote:
>Hi,
>
>Someone read the thread in interbase.general in the Borland Newsgroups?
>
>You can create an external table with the filename of the database itself,
>containing only one single integer field.
>Copying all the rows, you get a copy of the DB file.

The guy who raised the issue also raised it on firebird devel.
I believe we've got a fix for that - a configuration option that
specifies directories from which external files can be opened
or created. The problem has a worse manifestation. Consider that
you create an external file on some of the system security files.

He's asking for a new permission - create table - and it's one
we ought to consider seriously for the next version. (BTW, Jason
Wharton reported this two years ago.)

Ann