Security!

  • Thread starter Thread starter Cesar Urquidi
  • Start date Start date
C

Cesar Urquidi

Hello,
I have a database with users and permissions set up, but when I try to open
other databases with no users and permissions set up, it still asks me for a
password.
Why???
 
Hello,
I have a database with users and permissions set up, but when I try to open
other databases with no users and permissions set up, it still asks me for a
password.
Why???
Click to expand...

Because the user ID's and passwords are NOT stored in your database; instead
they are stored in a .MDW file. If you don't create a new .mdw file for your
custom database (as you should), all of the users and passwords will be set in
the default C:\Windows\System32\SYSTEM.MDW file, and that file will be used
for all Access databases.

Download the Microsoft Access 2000 Security FAQ:

http://support.microsoft.com/kb/207793/en-us

and read the section about specifying the workgroup file. Heck, read the whole
thing, carefully, twice, and make sure you've followed all the steps.
 
Cesar Urquidi said:
Hello,
I have a database with users and permissions set up, but when I try to
open
other databases with no users and permissions set up, it still asks me for
a
password.
Why???
Click to expand...

In addition to what John mentioned, you either have to change workgroups, or
use a shortcut to invoke the correct one for your database. The shortcut
should read like:

C:\Program Files\Office10\MSACCESS.EXE "C:\Database\MyApp.mdb" /wrkgrp
"C:\Database\Secure.mdw"
 
I have two .mdw files, one in the c drive, and the other in the k drive
(network drive).
I have two databases, one in the c drive, and the other in the k drive
(network drive).
I changed the database in the c drive to the system.mdw located in the c
drive, but when I try to open the database in the k drive, it is not
protected anymore.
I changed the database in the k drive to the system.mdw located in the k
drive, but when I try to open the database in the c drive, it is protected.
It looks like I'm going back in circles.
 
I have two .mdw files, one in the c drive, and the other in the k drive
(network drive).
I have two databases, one in the c drive, and the other in the k drive
(network drive).
I changed the database in the c drive to the system.mdw located in the c
drive, but when I try to open the database in the k drive, it is not
protected anymore.
I changed the database in the k drive to the system.mdw located in the k
drive, but when I try to open the database in the c drive, it is protected.
It looks like I'm going back in circles.
Click to expand...

Download and carefully study the Microsoft Access 2000 Security FAQ:

http://support.microsoft.com/kb/207793/en-us

Your database *is not correctly secured*.

There are two almost-independent things going on. The .mdw file (whichever
file you're using) contains information about Users (with their passwords) and
Groups; it contains absolutely *nothing* about the objects in your database.
The database contains information with each object (Form, Table, query, etc.)
indicating which Users and which Groups have permission to use that object and
how.

It would appear that the default Admin user still has permission to pretty
much everything. That's a key mistake, and leaves your database completely
insecure. Admin should have absolutely minimal or no permissions to anything!

Again... read the FAQ. Security is complicated, and it's easy to go astray.
 
 
Back
Top