> "Yes, if you have the ID of the blob, you can read it without
> going through the table-based security. But the only way to
> get the blob ID is to read the record that contains it, which
> is, of course, subject to table-based security. The ID is
> system generated."
> Pr. definition the data is not secure. I do not know the complexity of the
> ID, but in a large database with many blobs i guess it would possible to
> get some of the blobs by simple "brute force"
> regards
> Jesper Kiaer
> http://www.jezzper.com
>

You'd still have to have access to the database (as well as table access).
If you have the physical file, then all bets are off anyway.
I don't think this is much of an issue is it?
Alan