Password restriction

[Lindsay]

I am creating a database to store purchase order and savings
information. I want purchasing agents to be able to enter their
savings information, and I have created the form for that already. But
I want to password restrict the actual records, so they cannot change
other agents' information or their own. How can I password protect the
actual records?

 

[Rick B]

You would have to set up User-Level Security and require the users to log in
to your database. It is very very important that you create a backup of
your files before you start implementing ULS. It is also very important
that you follow every step in the list and that you do it in order. I have
included some links below my signature that will explain ULS.

You'd have to take away all access to the tables and queries.

Then, in each record, you'd have to store their UserID when they create the
record.

Then, you would create a query that pulls up all records where the userid is
equal to the current user. You'd set this query to run with owner's
permission (since the users won't have any access to it). You'd then build
a form based on that query and give your users access to that form.

Most of this is discussed often in the newsgroups. You might want to take
some time and read previous entries on "access only their records" or "with
owner permission" or "secure tables" or "lock out of tables" etc. You can
also search the microsoft knowledge base for securing tables or "with owner
permission".

--
Rick B

Security FAQ

http://support.microsoft.com/?id=207793



The Security Whitepaper is also worth reading to help you understand.

http://support.microsoft.com/?id=148555



Joan Wild:

www.jmwild.com/AccessSecurity.htm



Lynn Trapp

http://www.ltcomputerdesigns.com/Security.htm

 

[Guest]

You don't need a password. Just set the AllowEdits and, if necessary,
AllowDeletions properties of the form to No.

If you don't want an agent to be able to view other agents' records, then
you will need a field in the table with the agent's ID. I suggest you use
the agent's username and set the form's filter to view only those records
that have his name. You could also use his username to populate the field in
the table.