> > this change to security has been here ever since V2
> > it's along time so it's hardly something which has been
> > 'sprung' on anyone.
>
> I'm not sure how being able to get a list of connected users
> constitutes a security issue. In any event,
>
> Then the question may need to be asked how many applications will be
> affected. They are out there running happily (for perhaps quite long
> period of time and are therefore more likely to be established
> applications) on pretty stable v1.5.x and have waited - perhaps wisely
> - before finally committing to upgrade to 2.x?
>
> This is especially the case (as many people are aware - and a big
> criticism of FB and cause of confusion for new users) with the number
> of versions (and flavours, and backports) of each: v1.5.x, v2.0.x,
> v2.1x, v2.5 and future v3.
>
> On the main download page there are big icons to download v2.1.3,
> v2.0.5 and v1.5.6 (http://www.firebirdsql.org/index.php?op=files). Then
> you need to decide on SS or CS.
>
> In addition, having read the v2.1 release notes many times in the past
> I cannot recall any mention of this change. Can you point to where it
> is documented please.
>

gosh I just took a look and I have no idea how you could miss it.
since version 2.0.1 (march 2007) - that's 3 years ago.
There is a section on The New Security Database, page 85, plus numerous
other areas where the upgrade from security.fdb to security2.fdb is
explained in full. The implications and reason for not being able to connect
directly are also explained.

Which release notes are you reading? search for security2.fdb

Alan