PC Review


Reply
Thread Tools Rate Thread

backend security - One field unchangeable

 
 
=?Utf-8?B?ZGF2ZSBr?=
Guest
Posts: n/a
 
      31st May 2005
I would like to make the a field in the back-end of a database unchangeable
but keep the rest of the information modifiable. To simplify I don't mind
people using the backend in any way they want I just want to set a field
"Company Name" so that it is hard coded by me and cannot be changed. The
database I am writing depends heavily on reports that all use this field in
the heading (my security from unauthorized copies). I could put it in a
table or in a module hard coded. Is there a way to keep it unchangeable?
Currently there is no security (which I prefer) and the front-end is
distributated as an MDE.

Thanks,
Dave

 
Reply With Quote
 
 
 
 
Keith
Guest
Posts: n/a
 
      31st May 2005
"dave k" <(E-Mail Removed)> wrote in message
news:5938D947-4E73-496F-A4CD-(E-Mail Removed)...
>I would like to make the a field in the back-end of a database unchangeable
> but keep the rest of the information modifiable. To simplify I don't mind
> people using the backend in any way they want I just want to set a field
> "Company Name" so that it is hard coded by me and cannot be changed. The
> database I am writing depends heavily on reports that all use this field
> in
> the heading (my security from unauthorized copies). I could put it in a
> table or in a module hard coded. Is there a way to keep it unchangeable?
> Currently there is no security (which I prefer) and the front-end is
> distributated as an MDE.
>

User level security is object based (forms, tables, etc). I'm not aware of a
method to achieve your objective at field level. You could use a text box
on a form to do it but this would mean setting up security.

Regards,
Keith.
www.keithwilby.com


 
Reply With Quote
 
TC
Guest
Posts: n/a
 
      1st Jun 2005
Hopping in here (cos I can not see the OP's post):

You could do it without securing the database, by having a table with
one record & two fields:

CompanyName
MagicValue

When you set the CompanyName field before you sent your database to
that company, you would also store the MagicValue field as, for
example, the MD5 hash of the company name.

Then, in your MDE database startup code, check that the MD5 hash of
CompanyName, is equal to the MagicValue.

If it isn't, you know they've changed the CompanyName. (Kaboom!)

The security of this method would depend on the secrecy of how you
calculated the MagicVaue. Perhaps you could permute a common hash
function in some way; eg. add 5, or change the middle digit to 0, or
somesuch.

IOW you need not prevent them from changing the name; you need only
detect when they have done so.

HTH,
TC

 
Reply With Quote
 
=?Utf-8?B?ZGF2ZSBr?=
Guest
Posts: n/a
 
      2nd Jun 2005
Thanks! That is a great idea (why didn't I think of that?)!

You are correct, detection of a change is just as good as blocking it.

Dave


"TC" wrote:

> Hopping in here (cos I can not see the OP's post):
>
> You could do it without securing the database, by having a table with
> one record & two fields:
>
> CompanyName
> MagicValue
>
> When you set the CompanyName field before you sent your database to
> that company, you would also store the MagicValue field as, for
> example, the MD5 hash of the company name.
>
> Then, in your MDE database startup code, check that the MD5 hash of
> CompanyName, is equal to the MagicValue.
>
> If it isn't, you know they've changed the CompanyName. (Kaboom!)
>
> The security of this method would depend on the secrecy of how you
> calculated the MagicVaue. Perhaps you could permute a common hash
> function in some way; eg. add 5, or change the middle digit to 0, or
> somesuch.
>
> IOW you need not prevent them from changing the name; you need only
> detect when they have done so.
>
> HTH,
> TC
>
>

 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Unchangeable field MarianneZ Microsoft Access Database Table Design 3 22nd Apr 2011 11:18 AM
Re: Backend Security Arvin Meyer [MVP] Microsoft Access Security 2 18th Jan 2010 07:54 PM
Re: Unchangeable field Jeanette Cunningham Microsoft Access Database Table Design 0 5th Feb 2009 10:46 PM
Backend Security Steve Microsoft Access Security 3 22nd Sep 2004 04:14 AM
Unchangeable field in a form?? Mike Microsoft Frontpage 3 4th Sep 2003 12:25 AM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 05:46 AM.