LS> External applications use a "normal" users, our internal
LS> applications use SYSDBA. We want to even control our own
LS> applications from accessing the database

Single shutdown mode allows only one connection (from SYSDBA or
OWNER), so if you are able to assure that your maintenance app will
put the DB in Single Shutdown mode and be the first one to connect to
it just after that, you would be safe.

[]s
Carlos
Firebird Performance in Detail - http://videos.firebirddevelopersday.com
www.firebirdnews.org - www.FireBase.com.br