Micha Feigin wrote:

> I am suggesting that if a user wanted to break into the database file for
> whatever reason, having a password file won't stop him since he need read
> access to the database file anyway with the embeded server. The password file
> is only useful for a connection that doesn't give the user any direct access to
> the file.

That's true and I agree with you. AFAIK, the problem is that Firebird
architecture currently has such layout that removing the need for
security database is not an easy task.

As Helen already wrote, FB 3.0 will have more authentication options,
and I believe one of those will be "no authentication" or "dummy
authentication".


--
Milan Babuskov
http://swoes.blogspot.com/
http://www.flamerobin.org