At 07:53 PM 31/01/2007, you wrote:

> >> You can't create SYSDBA role if there already are objects owned by SYSDBA
> >> (or grants to SYSDBA). Try it.
> >
> > INSERT INTO RDB$ROLES ?
>
>Right. I wanted to avoid to discuss all possible corruptions
>users can do to their databases by direct updating system tables.
>If somebody is so "clever" that prevents both SYSDBA and db owner
>from login then he just gets what he deserves :-)

Well, that's quite true....but when someone presents it as a problem
and seems to think that Vista was responsible, we'd better know how
it happened. Remember SystemRestore on XP? That's been a nice
little piece of explosive waiting for everyone in the world running
Fb/IB databases with the [old] default database file suffix.

./heLen