Hi, Jamie.
ALTER DATABASE PASSWORD NULL administrator;
GRANT ALL PRIVILEGES ON [all my objects] TO [all my users];
Are you trying to say that George is advocating opening the door for
everyone into the database? If so, may I remind you that, by default,
there's no database password set on Access databases, a state that most
Access databases remain in? And even when they don't, there are free tools
available (or for a small price if one doesn't know where to look) that will
reveal the database password, so trying to secure the database with a
database password will keep only the most basic computer novices out of the
database.
May I also remind you that, by default, User-level Security is set so that
the Admin user is the owner of the database and all objects, and everyone
who opens the database _is_ the Admin user? So everyone who opens the
database has all priviledges on all objects, anyway. This is a state that
most Access databases remain in, even when User-level security is attempted,
because most people do it incorrectly the first few times.
In other words, the Access security door is almost always open, or can
easily be opened, so criticizing George for his "open door policy" serves no
purpose.
Maybe Access 2003 was made more secure for a reason?
If you think Access 2003 is more secure than earlier versions, then you are
mistaken. The Macro Security doesn't detect viruses, so it doesn't keep
one's computer "safe." The Macro Security warning gets ignored every time
an Access user opens a database when the setting is set to Medium. And when
it's set to High, the user can't open it unless it's digitally signed with a
certificate issued by a formal Certificate Authority, an expense most
organizations avoid. So if the Access user needs the database to do his
job, he either opens it with an earlier version of Access or he ends up
changing the Macro Security setting to a lower one in order to open the
database -- and ignores the warnings.
And what the Macro Security checks is whether there's VBA code and whether
there's certain expressions used in queries or in object properties, not
whether or not the file contains malicious code or expressions. It's like
throwing the baby out with the bath water, and since the Macro Security
can't discern between good and bad and doesn't even detect viruses, its
warnings get ignored.
Which is why Access 2003 is more annoying, but no more secure than earlier
versions of Access which lack this Macro Security "feature." And it's why
Microsoft changed this feature in Access 2007 so that there's a safe zone
that the Access user can set where all Access databases located there will
be trusted, thereby giving the user control over which files are safe (his
own) and which files should be eyed with suspicion (others', especially
those from outside of the organization) -- and allowing the Access user to
consider the Macro Security warning as it was intended -- if he hasn't
already been desensitized by the little boy crying wolf so often in Access
2003.
HTH.
Gunny
See
http://www.QBuilt.com for all your database needs.
See
http://www.Access.QBuilt.com for Microsoft Access tips and tutorials.
http://www.Access.QBuilt.com/html/expert_contributors2.html for contact
info.
Jamie Collins said:
Rick said:
Why? All it does is make Access 2003 work the same way every other
version of
Access has ever worked.
ALTER DATABASE PASSWORD NULL administrator;
GRANT ALL PRIVILEGES ON [all my objects] TO [all my users];
Use MEMO for all your table columns (Why? All it does is make Access
2003 work the same way every version of Excel has ever worked.)
If you want to prop open a fire door, there's usually a fire
extinguisher near by.
Sensible answer: caution required when disabling safety features.
George gave no caution. A simple workaround is available without
modifying security settings. Isn't that better advice, Rick?
Maybe Access 2003 was made more secure for a reason?
Jamie.