Allowing access to standard interface only to administrators

[Sietske]

My database is split into a BackEnd (located on the network) and a FrontEnd.
The FrontEnd contains a startup code routine for normal users: they can add
new records to the database and view (not edit) existing ones. However...
some users have enough knowledge of MS Access to know the trick with the
shift key....

I want only the future administrator to have access to the standard MS
Access interface, so that this person is the only one to edit existing
records, change layout, add data to normalized tables etc... How should I
protect the FrontEnd as well as the BackEnd?

My first thought was to do some password protection, but maybe it is better
to make an mda? Or is there even a better solution?


(ps.: I had some kind of network time-out, so I hope this question doesn't
reach you twice)

 

[Olduke]

The problem is that you still have the User "Admin" in your database. This
is what allows the other users to bypass your security by hitting the shift
key.

The answer - get rid of the User Admin.
This is a very exact process not to be attempted unless you know what you
are doing.

I would suggest you download:

http://www.geocities.com/jacksonmacd
Security Paper by Jack Macdonald which covers this procedure in depth.

 

[Sietske]

Many thanks for your suggestions! I've just started reading the Macdonald
document, it seems to be just what I was looking for.