PC Review


Reply
Thread Tools Rate Thread

Access 2007: security on file-level does not work

 
 
Guus
Guest
Posts: n/a
 
      20th Jul 2009
Hello,
We have an Accessdatabase 'Lending.mdb' to loan books.
The database is placed on a networkdrive, called G:\General

All the users of our department are allowed to read/write files in the
folder "G:\General".

Now the database has been moved to folder G:\Automation.
In this folder all the users are just allowed to READ files.
Adminstrator has setup the rights for 'Lending.mdb' specific to read/write.

Although this rights, it is impossible to add/change records in the
Loan-database.
In Office/Access-2003 there was now problem to laon (so append/edit etc.).

Office-2007 seems to handle different with read/write rights.
What's usefull to change, so everyone using Office-2007 can still use
'Lending.mdb'?

Thank you in advance,
Guus
 
Reply With Quote
 
 
 
 
Keith Wilby
Guest
Posts: n/a
 
      20th Jul 2009
"Guus" <(E-Mail Removed)> wrote in message
news:CA8F4A8F-0FCE-44D3-BA38-(E-Mail Removed)...
> Hello,
> We have an Accessdatabase 'Lending.mdb' to loan books.
> The database is placed on a networkdrive, called G:\General
>
> All the users of our department are allowed to read/write files in the
> folder "G:\General".
>
> Now the database has been moved to folder G:\Automation.
> In this folder all the users are just allowed to READ files.
> Adminstrator has setup the rights for 'Lending.mdb' specific to
> read/write.
>
> Although this rights, it is impossible to add/change records in the
> Loan-database.
> In Office/Access-2003 there was now problem to laon (so append/edit etc.).
>
> Office-2007 seems to handle different with read/write rights.
> What's usefull to change, so everyone using Office-2007 can still use
> 'Lending.mdb'?
>
> Thank you in advance,
> Guus


Users need write permissions to the host folder so that a record locking
file can be written to it. It sounds like your users are sharing an mdb
file. This is considered to be a bad thing. Multi-user apps should be
split, more info here:

http://www.granite.ab.ca/access/splitapp/index.htm

Keith.
www.keithwilby.co.uk

 
Reply With Quote
 
Guus
Guest
Posts: n/a
 
      21st Jul 2009
Excuse me Keith and other Office-expert,
I try to explain again my problem....

I have a lending database for the loan of books and software.
The database was originally created in Access version 2000.
The database works fine on a network for a group of employees.

All employees have read rights in the networkfolder "G:\Automation".

The database works perfect in Office 2003.
But now a number of colleagues already switched to Office 2007,
which is intended for all employees of the department.

The folder "G:\Automation" 's rights for all users is and will be "READ ONLY"
The database Loan.mdb in the folder has specific rights: "READ AND WRITE".

Despite these institutions, it seems impossible for the Office-2007
users to add records. In Office 2003 this was never a problem and
this problem is not there yet for Office 2003 users.

It seems that Office 2007 uses different rights.

REMEMBER: it is not an option for the administrator to place the database in
a
FOLDER with Read and write access. Sysadmin just want THIS
DATABASE read and write privileges.

I would like advice on how we can solve this problem.
Thanks,
Guus



"Keith Wilby" wrote:

> "Guus" <(E-Mail Removed)> wrote in message
> news:CA8F4A8F-0FCE-44D3-BA38-(E-Mail Removed)...
> > Hello,
> > We have an Accessdatabase 'Lending.mdb' to loan books.
> > The database is placed on a networkdrive, called G:\General
> >
> > All the users of our department are allowed to read/write files in the
> > folder "G:\General".
> >
> > Now the database has been moved to folder G:\Automation.
> > In this folder all the users are just allowed to READ files.
> > Adminstrator has setup the rights for 'Lending.mdb' specific to
> > read/write.
> >
> > Although this rights, it is impossible to add/change records in the
> > Loan-database.
> > In Office/Access-2003 there was now problem to laon (so append/edit etc.).
> >
> > Office-2007 seems to handle different with read/write rights.
> > What's usefull to change, so everyone using Office-2007 can still use
> > 'Lending.mdb'?
> >
> > Thank you in advance,
> > Guus

>
> Users need write permissions to the host folder so that a record locking
> file can be written to it. It sounds like your users are sharing an mdb
> file. This is considered to be a bad thing. Multi-user apps should be
> split, more info here:
>
> http://www.granite.ab.ca/access/splitapp/index.htm
>
> Keith.
> www.keithwilby.co.uk
>
>

 
Reply With Quote
 
Keith Wilby
Guest
Posts: n/a
 
      21st Jul 2009
"Guus" <(E-Mail Removed)> wrote in message
news:2C3BA35D-43B9-46D8-8F9C-(E-Mail Removed)...
>
> The folder "G:\Automation" 's rights for all users is and will be "READ
> ONLY"
> The database Loan.mdb in the folder has specific rights: "READ AND WRITE".
>


I can only re-state that the host folder "G:\Automation" needs "write"
permissions for users to be able to edit data. This is true for all
versions of Access so I can't explain how users are able to edit data when
the host folder is apparently read only. I suspect that it is not. Anyone
else care to jump in on this one?

 
Reply With Quote
 
Guus
Guest
Posts: n/a
 
      21st Jul 2009
Hello Keith,
The database opens standard with a form, the user has to make some choices.
After choosing 'Submit' an Appendquery adds automatically the data on the
form into the table 'Loan' of the database.

In Office-2007 there happens nothing, yet.
Guus

"Keith Wilby" wrote:

> "Guus" <(E-Mail Removed)> wrote in message
> news:2C3BA35D-43B9-46D8-8F9C-(E-Mail Removed)...
> >
> > The folder "G:\Automation" 's rights for all users is and will be "READ
> > ONLY"
> > The database Loan.mdb in the folder has specific rights: "READ AND WRITE".
> >

>
> I can only re-state that the host folder "G:\Automation" needs "write"
> permissions for users to be able to edit data. This is true for all
> versions of Access so I can't explain how users are able to edit data when
> the host folder is apparently read only. I suspect that it is not. Anyone
> else care to jump in on this one?
>
>

 
Reply With Quote
 
Albert D. Kallal
Guest
Posts: n/a
 
      28th Jul 2009
"Guus" <(E-Mail Removed)> wrote in message
news:CA8F4A8F-0FCE-44D3-BA38-(E-Mail Removed)...

>
> All the users of our department are allowed to read/write files in the
> folder "G:\General".
>


Are you talking about ms-access user level security, or rights setup by your
network?


> Now the database has been moved to folder G:\Automation.
> In this folder all the users are just allowed to READ files.


Again, if your talking about the network system, and NOT ms-accss user level
society, then what ms-access does have ZERO ZERO ZERO bearing here. If those
files are read only to all users, then they will REMAIN read only to those
users. NOTHING IN MS-ACCESS WILL CHANGE THIS FACT. Any user that needs to
update files in that directory MUST HAVE read + write permissions at the
network level (end of story). We are taking about a plane Jane windows file
here. If you open an access files, excel file, power-point file as read only
by the network, then it will REMAIN read only. If you open a file that your
read + write permissions, then you have read + write permissions (but, you
not be able to modify any other file that remains read only).


> Adminstrator has setup the rights for 'Lending.mdb' specific to
> read/write.
>


Again, are you talking about ms-access ULS, or your network permissions?

> Office-2007 seems to handle different with read/write rights.
> What's usefull to change, so everyone using Office-2007 can still use
> 'Lending.mdb'?


I not aware of any changes in ms-access 2007 in this regards. if you are
using ULS, then ensure that the access 2007 users are joined to the same
ms-access "mdw" workgroup file.

You should however keep in mind that if the 1st user that opens the file
opens it without network permissions (at the network level NOT ULS in
ms-access), then a locking file in that directory is NOT created and
ADDITIONAL USERS WITH READ + WRITE persimmons will be forced to open that
file as read only since the first user into that file was a read only user
(and the locking file can NOT be created - if this locking file cannot be
created, then all users are forced to read only - this read only issue only
applies to network security, NOT ms-access ULS).

So, clear up the issue if you using ULS (ms-access security) or your network
security, or in fact using both!!

--
Albert D. Kallal (Access MVP)
Edmonton, Alberta Canada
(E-Mail Removed)


 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
User Level Security in Access 2007 MDB a_ryan1972 Microsoft Access Security 2 25th Mar 2010 01:35 AM
Access 2007 running Access 2000 database - user level security Emma Microsoft Access Security 0 9th Apr 2009 02:33 PM
User level security in Access 2007 Acie Microsoft Access Security 0 2nd Oct 2008 07:03 PM
Access 97 Upgraded to Access 2007 User level security problem Derek Curtis Microsoft Access Security 3 6th Sep 2008 05:50 AM
No User Level Security in the new Access 2007 file format - a possible replacement? Help needed. Alan Cossey Microsoft Access Security 0 14th Sep 2006 08:37 AM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 05:56 PM.