User has rights - still can't access the database

[Pam]

We have a database on a shared drive. The user has been
given rights to the subfolder on the share, but those
rights aren't trickling down to the database within that
subfolder. The user has been added to the database group
but still cannot access the file.

Any ideas? I'm just starting to investigate this so any
information would be greatly appreciated.

Thank you,
Pam

 

[Eric Butts [MSFT]]

Hi Pam,

First thing I would recommend is that you approach Microsoft Access User
Level Security and Windows NT Security as 2 unrelated beasts.

For Windows NT Security if you set Full Control level permissions to the
subFolder and it's not trickling down to the file then it's possible it's
related to the Parent Folder permissions. Example:


GrandParent --- Read Only
Parent ----- Read & Write
Child ----------- Full Control
<file in Child folder> Full
Control

Say for instances for the Child folder you have selected "Allow inheritable
permissions to propagate" and the same for the Parent folder. Then your
effective permissions will be:

GrandParent --- Read Only
Parent ----- Read Only
Child ----------- Read Only
<file in Child folder> Read
Only

If you uncheck the option "Allow inheritable permissions to propagate" then
your effective permissions will be as expected.


I hope this helps! If you have additional questions on this topic, please
respond back to this posting.


Regards,

Eric Butts
Microsoft Access Support
(e-mail address removed)
"Microsoft Security Announcement: Have you installed the patch for
Microsoft Security Bulletin MS03-026? If not Microsoft strongly advises
you to review the information at the following link regarding Microsoft
Security Bulletin MS03-026
<http://www.microsoft.com/security/security_bulletins/ms03-026.asp> and/or
to visit Windows Update at <http://windowsupdate.microsoft.com/> to install
the patch. Running the SCAN program from the Windows Update site will help
to insure you are current with all security patches, not just MS03-026."

This posting is provided "AS IS" with no warranties, and confers no rights



--------------------
| Content-Class: urn:content-classes:message
| From: "Pam" <[email protected]>
| Sender: "Pam" <[email protected]>
| Subject: User has rights - still can't access the database
| Date: Wed, 16 Jun 2004 09:52:04 -0700
| Lines: 12
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| Thread-Index: AcRTwkBeJw3brV0vSW2uNOQV6ciBqA==
| Newsgroups: microsoft.public.access.security
| Path: cpmsftngxa10.phx.gbl
| Xref: cpmsftngxa10.phx.gbl microsoft.public.access.security:11506
| NNTP-Posting-Host: tk2msftngxa13.phx.gbl 10.40.1.165
| X-Tomcat-NG: microsoft.public.access.security
|
| We have a database on a shared drive. The user has been
| given rights to the subfolder on the share, but those
| rights aren't trickling down to the database within that
| subfolder. The user has been added to the database group
| but still cannot access the file.
|
| Any ideas? I'm just starting to investigate this so any
| information would be greatly appreciated.
|
| Thank you,
| Pam
|
|

 

[Pam]

Thank you Eric. I keep forgetting the permissions above
can override the permissions below.

One thing that's interesting, though - none of the
permissions on the database file are inherited. There
are 2 subfolders and 5 files in the main share folder.
Everything in that folder is inheriting from the folder
EXCEPT the database file. That's what makes me thing the
problem may be with setting the permissions in Access.

The database file is in the main share and is
named "QUALITY ASSURANCE DATABASE NEW (USE THIS
DATABASE).mdb". There is another file in the same folder
named "Quality Assurance Workgroup.mdw". The .mdw file
is inheriting it's rights from the main share - Quality
Assurance. However, the .mdb file isn't inheriting from
anywhere.

I'm not familiar enough with Access to know whether this
is common. I thought that since she'd set up a workgroup
to allow users access to the database, maybe this would
be where the permissions were assigned through. However,
she says she's give the user the same rights as everyone
else in the group.

I created a network group to make it easier to allow
access to users - just give the group rights and add the
users to the group. However, the file doesn't show the
group as having permissions either - even though it has
permissions at all other levels and on all other files.

I'll check with the server people and see if they can
assign permissions directly to the file. They prefer to
assign permissions to folders as opposed to individual
files, but that may be the only way for this to work.
What do you think?

Thanks,
Pam

 

[Joan Wild]

Right-click the folder and choose properties. Go to the Security tab and
click on Advanced. Put a check in 'Reset permissions on all child objects
and enable propagation of inheritable permissions'. See if that fixes it.