security

[Guest]

I am Building a database where employees go in and update their private
details such as qualifications, skillsets etc. I understand how
useraccounts/group accounts work but how do I secure the database so that
when one employee logs on, they are only allowed to see their own records and
not someone else's. What is the best way for securing the database, can you
do table where you put username and password and it looks up the information?
Not very good at VB either and not sure where to get this type of information
from - can someone help?

 

['69 Camaro]

Hi, Sarah.

If you have private information that you need to keep safe from other
employees' view, then you should _not_ store this data in a Microsoft Access
database. Even if one applies user-level security to the database, a
determined individual can break into it by purchasing a tool on the Internet
for a very reasonable price. I've seen tools advertised for as low as
$12.95, but some tools can be downloaded for free.

If that's not enough to deter you, then you'll need to read the Security FAQ
on this Web page:

http://support.microsoft.com/default.aspx?scid=/support/access/content/secfaq.asp

Read it and study it, then practice applying security on a _copy_ of your
database. One needs to create queries with "Run With Owner Permissions"
(RWOP), then remove all users' permissions to the tables, and make the
record sources for all forms and reports based upon these RWOP queries.

To limit what each person sees, create a public function in a standard
module that determines the UserID. Use this public function in the WHERE
clause of all queries that need to limit the recordset based upon who has
logged in. There will be no need to store passwords in your database, just
the UserID's so that they can be matched with the appropriate employee names
in one of the tables.

HTH.

Gunny

See http://www.QBuilt.com for all your database needs.
See http://www.Access.QBuilt.com for Microsoft Access tips.

(Please remove ZERO_SPAM from my reply E-mail address, so that a message
will be forwarded to me.)