Password-related Code

[kenrav]

I've developed an Access db app that includes a Login form containing
Username and Password fields. However, a prospective customer is asking for
a much higher level of password security including the use of special
character types, duration, reuse, etc. It's nothing I can't do, however, I'm
wondering if anyone knows of any code or add-in out there that might save me
some time? Thanks.










, e.g., Does anyone know of any code out there that

 

[David H]

We went with an approach that grabbed the user id of the person currently
logged into Windows and compared that to a record in a table to determine if
the person was authorized. The table uses the prefix USys to tell Access that
it should be treated as a system table and thus hide it by default.
Additional code locks out the user from accessing the DB window preventing
them from snooping around and thus adding or deleteing a user.

http://www.mvps.org/access/api/api0008.htm

If you do go this route, you'll want to use a global variable and wrapper
function so that the API isn't called unless the global variable is a
zero-length string. Using the function as-is worked well, however there was a
serious performance hit once I was connected to Active Directory. By
encapsulating the API, then its only called when neccessary.

If you haven't figured it out, this effectively shifts the burden for the
password requirements to the network admins.