This is also a generic problem, not just a backup problem. It would be good to disable reading/writing any file inside a database directory structure, e.g. for backup, import/export etc.
Any requirement to use getAbsolutePath or getCanonical path will require read permission on user.dir (I think Bryan said this), which is undesirable. Dan.
