How to prevent enabling the bypass key

[Bassel]

I have a database that is secured and the bypass key is enabled.

However if database user creates a new database linked to the same secured
workgroup.
He can uses a code to enable the bypass again

Function fncResetByPassEnable()
Dim dbTmp As Database
Set dbTmp = DBEngine.OpenDatabase("D:\Database\MyDB.mdb")
dbTmp.Properties("AllowBypasskey") = True
dbTmp.Close
Set dbTmp = Nothing
End Function
Is there is a way to prevent this

Best Regards

 

[Joan Wild]

Since it is secured, and if you disable it properly, only members of the
Admins group of the secure mdw file will be able to enable it again.

See http://www.mvps.org/access/general/gen0040.htm

 

[Bassel]

Than you for your reply . I didn't know about the DLL setting to true.
It is now working fine.

I have another question
I have a form by which you can add new users, add them to existing groups,
delete users. Currently only a user that belongs to Admins group can
successfully use this form to perform the above actions.

Is there is a way to give permission to a user to use this form( I mean to
run the code and create new users) and this user is not member of the Admins
group .
Thank you
Bassel

 

[Joan Wild]

No there isn't. However you can/should distribute a separate production mdw
file. It's Admins Group would be different than the one in your development
mdw file, therefore they'd be able to add/remove users but not have the same
permissions as the Admins Group in the development mdw.

Besically you set up a second mdw for production use. It would contain the
same Group names/pids as your development mdw, but you would choose a
different Workgroup ID/organization so that the Admins Group is different.

Details are in the security FAQ - section 33.
http://support.microsoft.com/?id=207793

 

[Guest]

Let me add that, you will want to add the new users
to a user group with permissions, rather than trying
to give any kind of permission to the new users.

Because admins in the new Admins group will be
able to add new users, and move users into a group,
but they won't control permissions the way the owner
can.