Stevio wrote:

> I understand that now, but what is the "proper" way to grant an application
> access to the database?

Prompt the user to enter username/password when the application wants to
connect to the database.

> At the moment I have the default sysdba password
> hardcoded in my app, but if the user changes their sysdba password, which
> most people with Firebird really should for security, then they cannot
> access my application.

Ordinary user using your application does not need to change the
metadata, only data. Thus, no need for him to use the SYSDBA.

> Where is the best place to put the user's password (hardcoded, registry, ini
> file - not very secure is it) or somewhere else?

In user's head.



--
Milan Babuskov
http://www.flamerobin.org
http://www.guacosoft.com