> This break logic in our application.

Agree - I don't supply role on connection in my apps at all, but to allow user to view attachments I must do this. Also, I need a possibility to grant privileges to regular user for managing server users (like SYSDBA) - as i know this is possible, but much more overhead then for MON$ATTACHMENTS.

> Hi,
>
>
> thank you. I see that in FB3 this is the only way :(
> This break logic in our application. Regular user ca not have privileges to change db structure but with RDB$Admin role he can :(
> I see that this is implemented only in FB4
> tracker.firebird.org/browse/CORE-2557
>