READ-ONLY USERS CAN CREATE TABLES

Im using Office XP hence Access 2002.
I set up a user and make them a member of the read-only users group.
they cannot alter the tables in any way - great.
but they can create NEW tables willy-nilly !
this cant be right can it.
ive never used Access 2000 so I dont know if it is a bug with Access
2002. Please tell me it isnt a feature !

On Fri, 27 Jun 2003 15:34:01 -0500, "Lynn Trapp"
<lNOspamtrapp@nospamltcomputerdesigns.com> wrote:

>Check to see what permissions the Users Group has on New Tables.

users, new tables/queries = nothing

Are your users seeing a logon screen when they open the database?

--
Lynn Trapp
MS Access MVP
www.ltcomputerdesigns.com
Access Security: www.ltcomputerdesigns.com/Security.htm



<sam1967@hetnet.nl> wrote in message
news:2sapfvsfvhg3aoine8gdpa1d1l4grucqfh@4ax.com...
> On Fri, 27 Jun 2003 15:34:01 -0500, "Lynn Trapp"
> <lNOspamtrapp@nospamltcomputerdesigns.com> wrote:
>
> >Check to see what permissions the Users Group has on New Tables.
>
> users, new tables/queries = nothing
>

On Fri, 27 Jun 2003 15:59:59 -0500, "Lynn Trapp"
<lNOspamtrapp@nospamltcomputerdesigns.com> wrote:

>Are your users seeing a logon screen when they open the database?

yes

On Fri, 27 Jun 2003 18:26:14 -0500, "Joan Wild"
<jwild@nospamtyenet.com> wrote:

>PMFJI, but the permissions you set on <New tables/queries> will be the
>permissions that they have on any newly created tables/queries. It does not
>affect whether they are able to create new ones.

yep.
i have removed every single permission from the user's group except
open/run database and the user can still create a new table.
that is pretty dreadful IMO and MS should sort it out.


>So if user Joe creates a new table, he'll have full permissions because he's
>the owner of the table. Any other users with read design/data on
>newtables/queries, will be able to read the data in Joe's table.
>
>If you want to prevent users from creating new objects, you can hide all the
>menus/toolbars/database window that give them access to do this or you can
>use the code in the security FAQ (section 24) to do this.

you shouldnt have to do this if the security in access was in any way
up to scratch .
removing all permissions from a user apart from opening the databse
should not allow him to create new tables. pretty awful.

On Fri, 27 Jun 2003 18:26:14 -0500, "Joan Wild"
<jwild@nospamtyenet.com> wrote:

>PMFJI, but the permissions you set on <New tables/queries> will be the
>permissions that they have on any newly created tables/queries. It does not
>affect whether they are able to create new ones.
>
>So if user Joe creates a new table, he'll have full permissions because he's
>the owner of the table. Any other users with read design/data on
>newtables/queries, will be able to read the data in Joe's table.
>
>If you want to prevent users from creating new objects, you can hide all the
>menus/toolbars/database window that give them access to do this or you can
>use the code in the security FAQ (section 24) to do this.

ok i got the code
------------------------------------------------------
Function faq_NoNew (strUser as String)

Dim db As Database
Dim con As Container

Set db = DBEngine(0)(0)
Set con = db.Containers("Tables")
con.UserName = strUser
con.Permissions = con.Permissions And Not DB_SEC_CREATE
End Function
--------------------------------------
how do i run it ? the FAQ doesnt give any indicator on how to run it.