> this change to security has been here ever since V2
> it's along time so it's hardly something which has been
> 'sprung' on anyone.

I'm not sure how being able to get a list of connected users constitutes a security issue. In any event,

Then the question may need to be asked how many applications will be affected. They are out there running happily (for perhaps quite long period of time and are therefore more likely to be established applications) on pretty stable v1.5.x and have waited - perhaps wisely - before finally committing to upgrade to 2.x?

This is especially the case (as many people are aware - and a big criticism of FB and cause of confusion for new users) with the number of versions (and flavours, and backports) of each: v1.5.x, v2.0.x, v2.1x, v2.5 and future v3.

On the main download page there are big icons to download v2.1.3, v2.0.5 and v1.5.6 (http://www.firebirdsql.org/index.php?op=files). Then you need to decide on SS or CS.

In addition, having read the v2.1 release notes many times in the past I cannot recall any mention of this change. Can you point to where it is documented please.