Whare are permissions stored?

[Guest]

In a split db, where are group permissions actually stored -- in the .mdw
file or in the FE? I keep setting group permissions and they keep changing.

 

[Rick Brandt]

In a split db, where are group permissions actually stored -- in the
.mdw file or in the FE? I keep setting group permissions and they
keep changing.

In a split app (all apps actually) the MDW holds account info and group
memberships of accounts. The front end holds the permissions to objects in
the front end file and the back end holds the permissions to the back end
objects.

 

[Guest]

I am "losing" permissions on certain forms. It sounds as though the problem
would be with the FE, somehow.

 

[Rick Brandt]

I am "losing" permissions on certain forms. It sounds as though the
problem would be with the FE, somehow.

"Rick Brandt" wrote:

Never heard of that happening.

Are you granting permissions to individual users or only to groups? The
latter is MUCH simpler to manage. Do you give each user their own copy of
the MDW file or is everyone using a shared copy. The latter is better in
this case too, but it is virtually required if you grant permissions to
individual users.

 

[Joan Wild]

How are you determining that permissions are getting lost? Remember that if
you grant permissions to groups, and make users members of that group, those
are called implicit permissions. When you look in the security permission
dialogs for a user, those permissions won't show. They will show for the
group, though.

The only way that permissions could get lost, is if you import an object
from another database - permissions don't travel with an import/export.

 

[Guest]

I think I may have figured this out. If I have, I feel REALLY, REALLY dumb.
The dbs are on a server, and we started using Tony's Auto FE Updater about
three months ago. The permissions are set by group, not user. I haven't had
an .mdw file on my development area, so I've been resetting the permissions
on the server with the icon that starts the Auto FE Updater. That means that
I've been setting the permissions on the FE copy on the workstation in the
user's profile. I just linked an .mdw to my development FE, changed
permissions, and then copied that FE in a test environment. I'll put the FE
with the correct permissions on one of the real sites, but I'm pretty sure
that's the problem. It really explains why I could "fix" the permissions on
a user's profile and they would stay "fixed" until I deleted the user's
profile. DUUHHH! I've always set permissions directly on the server, but
everyone was pointing to the save FE until we implemented the Auto FE
Updater. Thank you, Rick and Joan, for responding to this issue over which
I've lost a lot of sleep. If there are flaws in my current perception,
please let me know. I think I've lost about any confidence I had.

 

[Joan Wild]

Yes, you should be making changes/testing in your copy of the frontend, and
once ready, deploy it.