Listing PIDs

[Nando]

Hi all! Does anyone know whether there is a way to list all the users and
groups PIDs? I tried the following code but it does not work. It comes up
with "Compiler error: Invalid use of property"

Dim wrk As DAO.Workspace
Dim usr As DAO.User

Set wrk = DBEngine.Workspaces(0)

For Each usr In wrk.Users
Debug.print usr.PID
Next usr

 

[Chris Mills]

So far as I know, you can list users, and groups they belong to, by stepping
through the appropriate system tables.

And so far as I know, listing PID's, or even recovering them individually,
would be a major security breach wouldn't it?

To the best of my knowledge, a PID is "Write-Only". At least I hope it is!

Chris

 

[Nando]

Thanks Chris. I was just trying to document a db I created, in case the
wrkgp file ever needs to be recreated. It seems I cannot list the PIDs even
if I logon with the super admin account. I'll have to keep document all by
hand then.

 

[Chris Mills]

Well, just to confirm, Users can be documented (by extraction from the
database) but PID's can't be. They seem to me, as mysterious and secure as a
PID on your Credit Card!

At times this has been a hassle. For example, some change was made between A97
and A2000 mdw's, causing one to have to re-create all the Users and PID's
again (or totally desecure and resecure the database).

Fortunately for me, I either had written down or could remember (it was the
latter...I'm slack writing these things down) the users and their PID's.
Passwords can be re-set and so don't need the same level of care.

Some of the top expert recovery services may be able to recover PID's (for all
I know). But certainly, no reasonable person in this newsgroup can. That's why
they say, you should write this stuff down when you secure it. If you're
taking over from someone else and don't have the information, then you should
desecure and resecure it under your own documented schema! Document, means by
separate paper, put in a vault, not near an earthquate faultline, or so I keep
meaning to do!

However, on some sites which seemed critical to me, I did give them a letter
to be opened only upon my Death! I'm serious. Not all the PID's, but certainly
the master PID or how to reproduce.

Now, it seems, Access was Insecure Anyway! (bawling my eyes out)
(how come average people, even average professionals, still need this stuff
documented to get into a database? Overpower an unknown PID?)

Chris