MDW

[Steven]

I have a question about mdw permissions. I have a
multiuser database on a network that is using the
default 'system.mdw' file. The users add data to tables ;
delete data from tables; view data in tables; etc all
through forms and queries and sql code. I control what
the user can do by assigning them a user level when they
enter the system but this is all through my own
programming.

Q1: Since I need the users to be able to add, delete, view
table data then if I created a new specific mdw file they
would have to have Read Design, Read Data, Insert Data,
Update Data and Delete Data. Correct?

Q2: If that statement is true then that same usergroup
would be able to open another database and import tables
from the main database. Correct?

Basically I think I am finding out that if you need a user
to be functional, ie (data input users), to have the
ability to work with the tables in a database then that
same user can backdoor the database and take the tables to
another database. There is nothing to stop that. Right?

I know this is a lengthy posting. Thank you for your help.

Steven.

 

[Jack MacDonald]

Essentially correct. If they have read permissions then they can copy
data.

I have a question about mdw permissions. I have a
multiuser database on a network that is using the
default 'system.mdw' file. The users add data to tables ;
delete data from tables; view data in tables; etc all
through forms and queries and sql code. I control what
the user can do by assigning them a user level when they
enter the system but this is all through my own
programming.

Q1: Since I need the users to be able to add, delete, view
table data then if I created a new specific mdw file they
would have to have Read Design, Read Data, Insert Data,
Update Data and Delete Data. Correct?

Q2: If that statement is true then that same usergroup
would be able to open another database and import tables
from the main database. Correct?

Basically I think I am finding out that if you need a user
to be functional, ie (data input users), to have the
ability to work with the tables in a database then that
same user can backdoor the database and take the tables to
another database. There is nothing to stop that. Right?

I know this is a lengthy posting. Thank you for your help.

Steven.

**********************
(e-mail address removed)
remove uppercase letters for true email
http://www.geocities.com/jacksonmacd/ for info on MS Access security