READ-ONLY USERS CAN CREATE TABLES

[sam1967]

Im using Office XP hence Access 2002.
I set up a user and make them a member of the read-only users group.
they cannot alter the tables in any way - great.
but they can create NEW tables willy-nilly !
this cant be right can it.
ive never used Access 2000 so I dont know if it is a bug with Access
2002. Please tell me it isnt a feature !

 

[sam1967]

Check to see what permissions the Users Group has on New Tables.

users, new tables/queries = nothing

 

[Lynn Trapp]

Are your users seeing a logon screen when they open the database?

--
Lynn Trapp
MS Access MVP
www.ltcomputerdesigns.com
Access Security: www.ltcomputerdesigns.com/Security.htm

 

[sam1967]

Are your users seeing a logon screen when they open the database?

yes

 

[sam1967]

PMFJI, but the permissions you set on <New tables/queries> will be the
permissions that they have on any newly created tables/queries. It does not
affect whether they are able to create new ones.

yep.
i have removed every single permission from the user's group except
open/run database and the user can still create a new table.
that is pretty dreadful IMO and MS should sort it out.

So if user Joe creates a new table, he'll have full permissions because he's
the owner of the table. Any other users with read design/data on
newtables/queries, will be able to read the data in Joe's table.

If you want to prevent users from creating new objects, you can hide all the
menus/toolbars/database window that give them access to do this or you can
use the code in the security FAQ (section 24) to do this.

you shouldnt have to do this if the security in access was in any way
up to scratch .
removing all permissions from a user apart from opening the databse
should not allow him to create new tables. pretty awful.

 

[sam1967]

PMFJI, but the permissions you set on <New tables/queries> will be the
permissions that they have on any newly created tables/queries. It does not
affect whether they are able to create new ones.

So if user Joe creates a new table, he'll have full permissions because he's
the owner of the table. Any other users with read design/data on
newtables/queries, will be able to read the data in Joe's table.

If you want to prevent users from creating new objects, you can hide all the
menus/toolbars/database window that give them access to do this or you can
use the code in the security FAQ (section 24) to do this.

ok i got the code
------------------------------------------------------
Function faq_NoNew (strUser as String)

Dim db As Database
Dim con As Container

Set db = DBEngine(0)(0)
Set con = db.Containers("Tables")
con.UserName = strUser
con.Permissions = con.Permissions And Not DB_SEC_CREATE
End Function