At 03:48 AM 25/11/2003 +0000, you wrote:

>Hi All,
>
>I have done a test on FB1.5 RC7 embed, it seems that even invalid userid
>and password can also log into the database.
>
>I understand that FB 1.5 RC7 embedded doesn't use security.fdb.
>Is it because so?

Yes, that's the reason.

But if the invalid user doesn't have SQL privileges to anything in the
database, it doesn't do him any good.

hb