About Microsoft Access Security in 2007

[Lilian]

Hello Access experts!
I want to secure my database which I created in Access 2007. As far I
understood it's no longer possible to provide workgroup security as it was
possible in early Access versions. I need to create two user groups: admins
and users. It's not possible for me to convert my project into earlier
versions because the database must be only in Access 2007.
Do I need to create my own administration system to provide multiuser access?
Please help me!
With best regadrs,
Lilian

 

[Joan Wild]

If you keep the mdb format in 2007, it supports security. If you move to the accdb format, it's not supported.

You'll have to roll your own in accdb.

--
Joan Wild
Microsoft Access MVP
: Hello Access experts!
: I want to secure my database which I created in Access 2007. As far I
: understood it's no longer possible to provide workgroup security as it was
: possible in early Access versions. I need to create two user groups: admins
: and users. It's not possible for me to convert my project into earlier
: versions because the database must be only in Access 2007.
: Do I need to create my own administration system to provide multiuser access?
: Please help me!
: With best regadrs,
: Lilian
:

 

[Tom van Stiphout]

On Wed, 14 May 2008 04:36:01 -0700, Lilian

That's what I would do: create two groups in Active Directory and use
LDAP to check for membership.
-Tom.

 

[Lilian]

Hello Joan Wild!
Thank you for answer. How to keep mdb format in 2007? Is it converting via
save as for ex 2002-2003 file format? As far as I understand mdb is in
previous versions.
Do you have some example about how to roll my own administration system in
2007?



"Joan Wild" skrev:

 

[Lilian]

Hello Tom!
Is it the only one method (I mean program LDAP) to solve the problem?
Best regards,
Lilian

"Tom van Stiphout" skrev:

 

[Joan Wild]

Idon't have 2007 installed, but I believe that when you use File, New, you are given the choice to create MDB or ACCDB, use a template, etc.


--
Joan Wild
Microsoft Access MVP
: Hello Joan Wild!
: Thank you for answer. How to keep mdb format in 2007? Is it converting via
: save as for ex 2002-2003 file format? As far as I understand mdb is in
: previous versions.
: Do you have some example about how to roll my own administration system in
: 2007?
:
:
:
: "Joan Wild" skrev:
:
: > If you keep the mdb format in 2007, it supports security. If you move to the accdb format, it's not supported.
: >
: > You'll have to roll your own in accdb.
: >
: > --
: > Joan Wild
: > Microsoft Access MVP
: > : Hello Access experts!
: > : I want to secure my database which I created in Access 2007. As far I
: > : understood it's no longer possible to provide workgroup security as it was
: > : possible in early Access versions. I need to create two user groups: admins
: > : and users. It's not possible for me to convert my project into earlier
: > : versions because the database must be only in Access 2007.
: > : Do I need to create my own administration system to provide multiuser access?
: > : Please help me!
: > : With best regadrs,
: > : Lilian
: > :
: >

 

[Tom van Stiphout]

On Wed, 14 May 2008 08:36:03 -0700, Lilian

It is my preferred solution, because it avoids having to write (and
secure) the user administration. Active Directory already does that.

Of course there are other options, such as creating your own users and
roles tables, writing your own admin function to assign roles to
users, etc.

-Tom.

 

[Lilian]

Hello Tom!
Thank you for your answer.
Do you know if there is trial version for program Active Directory?
Best regads,
Lilian

"Tom van Stiphout" skrev:

 

[Tom van Stiphout]

On Thu, 15 May 2008 06:45:01 -0700, Lilian

Active Directory is built-in any Windows Server product. It is not a
separate install you could run on your Windows XP desktop afaik. It is
used to manage Windows Domains.

-Tom.

 

[Lilian]

Hello Tom!
Thank you. Now I know about Active Directory.
I began to create my own adminstration system yesterday and got some
problems in making levels (status) for the users:admins and users. Do you
have some work examples of administration system?
I will be very glad if you as Access expert will help me.
Best regads,
Lilian

"Tom van Stiphout" skrev:

 

[Rick Brandt]

Hello Tom!
Thank you. Now I know about Active Directory.
I began to create my own adminstration system yesterday and got some
problems in making levels (status) for the users:admins and users. Do
you have some work examples of administration system?
I will be very glad if you as Access expert will help me.
Best regads,
Lilian

Here is what I do...

I have a table of users that has amongst other things their Windows login
(primary key), Email address, First Name, Last Name, etc..

I have a two field table that maps Windows logins to PermissionCodes. These
are just strings I make up to use as an access key for certain areas of the
application. A user can have zero to an indefinite number of entries in this
table.

I have a user defined function Permission() that returns true or false for
the current user that takes a permission code as an argument.

So...

If I have a form that I only want users posessing the permission code
"SalesAdmin" to be able to open I can use this code in the Open event of the
form...

If Not Permission("SalesAdmin") Then
MsgBox "Access Denied"
Cancel = True
End If

I would be the first to point out that this is not "real security", but it
allows me to control how the front end interface behaves with respect to who
should be doing what and it does so very simply and with very little
maintenance. Most of this is redundantly secured using the security of the
server databases that my apps connect to so if someone defeated the system
described above they would just get an ODBC error anyway.