Link to SQL Server table - readonly?

[Stephen Howe]

Hi

I have seen a link from Access to table on a SQL Server 2000 database.
I have not checked, but are these links to table data readonly?

I am disturbed if our SQL Server database tables can be changed by external
users

Thanks

Stephen Howe

 

[Rick Brandt]

Hi

I have seen a link from Access to table on a SQL Server 2000 database.
I have not checked, but are these links to table data readonly?

I am disturbed if our SQL Server database tables can be changed by
external users

That is controlled by the permissions you grant on the server object. If
you don't want a user to edit data then don't give them update permissions.

 

[Stephen Howe]

That is controlled by the permissions you grant on the server object. If

you don't want a user to edit data then don't give them update

permissions.

I thought it might be something like this. That is a problem then.

We have an "authorised" app.
It is permitted to update the SQL Server database as everything is done
programmatically.
It is trusted.

But the same person who does Access links also runs the "authorised" app.
There is nothing stopping them from using the password/userid for the
"authorised" app for Access and gaining complete access to the SQL Server
database.

Stephen Howe

 

[Stephen Howe]

We have an "authorised" app.

It is permitted to update the SQL Server database as everything is done
programmatically.
It is trusted.

Seems to the that the right thing to do is have some indirection.
The authorised app uses a hidden userid/password which grants full access.
None of the users know this.

Stephen Howe

 

[Joe Fallon]

Bingo.
You can create a new User who only has SELECT permissions on the tables and
then give out that ID for people to link and run reports.

You should tell the Admin of the app that he is not allowed to use the ID
with CRUD permissions.
Maybe in writing.