Access 2007, Office Live Premium and security

A

Alan Cossey

I am using Access 2007 with Office Live Premium and am very impressed
so far. I even set up a 30,000 record list yesterday and, though
opening the list (linked table in Access) brought Access to a grinding
halt, as expected, opening a query that restricted the number of
records worked well. However, that is not what I am posting here
for....

In Business Applications/Projects, I have gone to the Projects list
and used Actions/Open with Access and created a linked table that
allows me to view and modify data in OLP from Access 2007. This is
very satisfying and it looks as if Access is doing what it says on the
tin (to quote a UK TV advert).

Having rebooted my PC (to make sure I am logged out of OLP because
logging out is a problem at present) and not having logged back into
OLP after the reboot, I am able to open my Access 2007 database and
modify the data in the Project-related tables without having to supply
any log in info.

Does anyone know the mechanism of how OLP determines what to allow
this Access 2007 database to do? It seems to open up with the
privileges of the person logged in at the time the linked table was
created in Access, which is not surprising, but not necessarily what I
want. The good news, for me at least, is that if I now change my
Windows Live ID password, Access prompts me for E-mail address and
Password. Now, as long as I do not tick the "Sign me in automatically"
checkbox, Access prompts me for E-mail address (i.e. ID) and password
the first time I open a table in Access. Subsequent uses of tables in
that session of Access do not require further entry of ID and
password.

However, if I now put my password back to what it was when I created
the linked table, Access is once more able to connect up to OLP
straight away. Must remember to change Live ID password before
creating linked tables...

I have read
http://office.microsoft.com/en-us/products/FX101153361033.aspx which
suggested to me that cookies might be involved. However, I deleted all
cookies from my computer and Access 2007 can still get into OLP.

I have checked through all the properties of all the linked tables in
the Access database and can find nothing obvious that contains user
ID/password info for allowing the database into OLP.

I would be happy if Access 2007 has stored this information in such a
way that people really cannot access it (smoke and mirrors do not
count), but there have been holes in Access 2007 security in the past
and I would like to know whether it is reasonable to trust Access
2007/OLP in this regard. Bearing in mind that Microsoft have really
beefed up database encryption and the database password mechanism, I
am hoping I can.

Any ideas, anyone, on where this info gets stored and how secure it
is?



Alan Cossey
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top