--- In ib-support@y..., "Ann W. Harrison" <aharrison@i...> wrote:

> At 10:23 AM 3/6/2002 +0100, Martijn Tonies wrote:
> >Hi,
> >
> >Someone read the thread in interbase.general in the Borland

Newsgroups?

> >
> >You can create an external table with the filename of the database

itself,

> >containing only one single integer field.
> >Copying all the rows, you get a copy of the DB file.
>
> The guy who raised the issue also raised it on firebird devel.
> I believe we've got a fix for that - a configuration option that
> specifies directories from which external files can be opened
> or created. The problem has a worse manifestation. Consider that
> you create an external file on some of the system security files.
>

I see no fix for this in the configuration option. There is and
option (EXTERNAL_FILE_DIRECTORY) to specify directories to search for
files. However this does not block a specified path.

> He's asking for a new permission - create table - and it's one
> we ought to consider seriously for the next version. (BTW, Jason
> Wharton reported this two years ago.)
>
> Ann