Nando,Helen

> We'd need to be able to revoke a "create database" privilege that
> unfortunately doesn't exist AFAIK.
>
> Using aliases helps a bit, by obfuscating the real paths, but it's not
> really secure.

By the way : how is presented database in error messages in this situation :
by the short alias name or by the full path ? I have strange suspicion that
full path in presented to user which may broke security, but I may be wrong.

Boguslaw