Hi Christiane,
I understand the security risk - but SAP cannot give up important functionality for backup without supplying an alternative. Since 7.8 MaxDB supports I/P consitent EXTERNAL snapshots:
db_connect
backup_start <template_name>
<create the IO consistent Snapshot clone>
backup_finish <template_name> ExternalBackupID <external_backup_ID>
db_release
Now these snapshots are not longer possible. We need to start an external script from within dbmcli.
You have already a concept for that: Events are allowed to start scripts which are listed in dbm_whitelist.cfg.
Regards Günter