Artur Anjos schrieb:

> If someone gets direct access to your database file, forget about security.
> If you use embedded, you must give direct access to the file to the user
> that runs the application.

With this assumption one should also forget about blocking SYSDBA out
of the database. In most installation I wouls assume that SYSDBA is
the person with direct access to all files on the server. Defining a
role "sysdba" seems to be an minimal barrier only.

Elmar