Link to SQL Server table - readonly?

  • Thread starter Thread starter Stephen Howe
  • Start date Start date
S

Stephen Howe

Hi

I have seen a link from Access to table on a SQL Server 2000 database.
I have not checked, but are these links to table data readonly?

I am disturbed if our SQL Server database tables can be changed by external
users

Thanks

Stephen Howe
 
Stephen said:
Hi

I have seen a link from Access to table on a SQL Server 2000 database.
I have not checked, but are these links to table data readonly?

I am disturbed if our SQL Server database tables can be changed by
external users
Click to expand...

That is controlled by the permissions you grant on the server object. If
you don't want a user to edit data then don't give them update permissions.
 
That is controlled by the permissions you grant on the server object. If
you don't want a user to edit data then don't give them update
Click to expand...
permissions.

I thought it might be something like this. That is a problem then.

We have an "authorised" app.
It is permitted to update the SQL Server database as everything is done
programmatically.
It is trusted.

But the same person who does Access links also runs the "authorised" app.
There is nothing stopping them from using the password/userid for the
"authorised" app for Access and gaining complete access to the SQL Server
database.

Stephen Howe
 
We have an "authorised" app.
It is permitted to update the SQL Server database as everything is done
programmatically.
It is trusted.
Click to expand...

Seems to the that the right thing to do is have some indirection.
The authorised app uses a hidden userid/password which grants full access.
None of the users know this.

Stephen Howe
 
Bingo.
You can create a new User who only has SELECT permissions on the tables and
then give out that ID for people to link and run reports.

You should tell the Admin of the app that he is not allowed to use the ID
with CRUD permissions.
Maybe in writing.
 
Back
Top