Hi

I just thought about some recent posting about database security and CREATE
permissions.
From what I know, meta-data modification is simply data modification for
system tables.

Couldn't we simply create a trigger for RDB$SOMETHING to watch for create
modifications and rollback if that user doesn't have sufficient rights in
our system?
Or aren't trigges allowed on RDB$... tables?

Right now, I am pretty sure that should work, but on the other side, I
cannot believe noone got that idea before. There must be some reason, this
does not work? Anyone tried?

Regards,
Steffen


[Non-text portions of this message have been removed]