Security in Access 97

[dbain30]

My knowledge of Access could best be described as intermediate but
I've never really been involved with security beyond "hiding" many of
the objects and creating a database password.

I have a file at work that approximately 20 individuals use. It's not
a split database, I'm still learning more about that, and it's used to
monitor letters that are sent to customers. The data is pulled from
ODBC tables, placed in tables within the database to include
additional fields and to provide access to those who do not have
access to the data tables. When it's time for a customer to receive a
letter the account appears in a form, the user selects the item,
performs the necessary due diligence and with the click of a button it
send the report to their email and activates an update query to stamp
the date and user information for tracking purposes.

So far, everything works as expected. The problem is that our Audit
department wants us to implement controls that would prevent anyone
who isn't authorized from tampering with the queries. I need to find
a way to prevent them from accessing anything in the Query or Macro
menu, however, I cannot take away the functionality that allows them
to run the update queries.

Any suggestions would be greatly appreciated. Thanks in advance for
your help!

 

[Keith Wilby]

The problem is that our Audit
department wants us to implement controls that would prevent anyone
who isn't authorized from tampering with the queries. I need to find
a way to prevent them from accessing anything in the Query or Macro
menu, however, I cannot take away the functionality that allows them
to run the update queries.

The way to do this is to allow your users access to forms only. You can run
update queries by placing buttons on forms or attaching code to form events.
You deny access to queries by hiding the database window at start-up. You
would also need to disable the bypass key so that users can't unhide the db
window by holding down the shift key. User Level Security can provide an
additional layer of protection but it can be broken by a determined hacker
with the right tools.

Keith.
www.keithwilby.com