Networking_Security

  • Thread starter Thread starter Roger Bell
  • Start date Start date
R

Roger Bell

I have installed several Data Bases on a Server and then linked the Remote
Machines to the Back End. This works fine. I have also created a Users file
for Passwords (Full Access & Read Only) through Workgroup Administrator. My
problem is that once Users have been given the password for Full Access, they
are not restricted to just one data base, but can access all the data bases.
I would like a remote user to be able to Edit one Data Base but not others
(restrict to read only).

Is this achievable and how would I go about this.

Thanks for any help
 
Roger said:
I have installed several Data Bases on a Server and then linked the
Remote Machines to the Back End. This works fine. I have also
created a Users file for Passwords (Full Access & Read Only) through
Workgroup Administrator. My problem is that once Users have been
given the password for Full Access, they are not restricted to just
one data base, but can access all the data bases. I would like a
remote user to be able to Edit one Data Base but not others (restrict
to read only).

Is this achievable and how would I go about this.

Thanks for any help

Permissions are per MDB file. If you want a user to have different
permissions in each file then open each file and set them that way.
 
Thanks Rick. Perhaps I have gone about this security issue the wrong way.
When I join the Workgroup and save the new MDW file, the Passwords on the
individual computer apply to all data Bases on that machine.

What should I do, so that I can apply individual passwords and rights for
each seperate data base?

Thanks for any help
 
Thanks Rick. Perhaps I have gone about this security issue the wrong way.
When I join the Workgroup and save the new MDW file, the Passwords on the
individual computer apply to all data Bases on that machine.

What should I do, so that I can apply individual passwords and rights for
each seperate data base?

Permissions on database objects are stored in the database.

User ID's and passwords are stored in the MDW file.

They interact, but each can be set independently of the other.

Download the Microsoft Access 2000 Security FAQ:

http://support.microsoft.com/kb/207793/en-us

Print it out and read it carefully - *twice*. Follow the instructions
scrupulously.

Each database (or set of databases sharing the same security needs) should
have *its own* separate mdw file; the default SYSTEM.MDW in the WINDOWS\SYSTEM
directory should be left alone.
 
Roger said:
Thanks Rick. Perhaps I have gone about this security issue the wrong
way. When I join the Workgroup and save the new MDW file, the
Passwords on the individual computer apply to all data Bases on that
machine.
UserNames and passwords are dictated by the workgroup file being used. If
you use one that has a password on the default user (Admin) then you must
supply a UserName and password for the *Access session* that you are
starting. Neither Access, the workgroup, nor the session concern themselves
with which MDB file(s) you might decide to open.

If you make such a workgroup your default by "joining it" (bad idea) then
you have to log in every time, but that does not mean that "the Passwords on
the individual computer apply to all data Bases on that machine". User Level
Security passwords never apply to MDB files. Only to the workgroup files.

Now, once a session has been started each MDB you open will interrogate the
session to see what the current user account is, what group memberships it
has, and whether any of those have proper permissions for opening the file
and using specific objects within.
What should I do, so that I can apply individual passwords and rights
for each separate data base?

You don't typically. You use shortcuts that specify your secure workgroup
for opening files where you want security and you leave your default
workgroup set to the default System.mdw so that Access can be opened without
logging in for opening MDB files that you do not want security on.

If you have 5 different MDB that you want a user to have different
permissions in you can use the same workgroup and the same user account for
all of those files. You just give that user account different permissions in
each MDB file.
 
Back
Top