Workgroup file in Network drive and Local computer

[PadmaBhaskar]

I have a MS Access application, which is secured by creating user
groups accounts (AppAdmins and AppUsers) and permissions. Both the
application MDB and the workgroup file .mdw are going to be in the
shared network drive.

Can someone copy the .mdw file to the local computer and consequently
join to the local .mdw? A user may initially have Administrative rights
and may be changed to normal user group by the DB administrator (This
change is effective in the network wrkgrp file). But, if the user is
still joined to his local workgroup file, it won't take effect and the
security is lost.

Is my understanding correct, or am I missing something here?

 

[Joan Wild]

Your understanding is correct.

To avoid the problem, you could assign permissions to Users, rather than
Groups. Permissions reside in the mdb, so this would work however it'd be
tedious to manage security by Users.

I suppose another possibility is to check the path to the current mdw in
use. If it isn't the server path, you could throw up a message and close
the mdb.

You can check the mdw in use by using
DBEngine.SystemDB

 

[PadmaBhaskar]

Thanks Joan, it was very helpful!

Your understanding is correct.

To avoid the problem, you could assign permissions to Users, rather than
Groups. Permissions reside in the mdb, so this would work however it'd be
tedious to manage security by Users.

I suppose another possibility is to check the path to the current mdw in
use. If it isn't the server path, you could throw up a message and close
the mdb.

You can check the mdw in use by using
DBEngine.SystemDB