--- In firebird-support@yahoogroups.com, Elmar Haneke wrote:

> Artur Anjos schrieb:
>
> > If someone gets direct access to your database file, forget about
> > security. If you use embedded, you must give direct access to the
> > file to the user that runs the application.
>
> With this assumption one should also forget about blocking SYSDBA
> out of the database. In most installation I wouls assume that SYSDBA
> is the person with direct access to all files on the server.
> Defining a role "sysdba" seems to be an minimal barrier only.

One thing that would protect your data a bit more, is if you encrypted
them before storing. Of course, you would have to include the
decryption algorithm in your program or else it would be impossible to
view your data. How happy I am that I work in a place where I can
trust our SYSDBA and that our system is physically separated from the
Internet!

Set