Folder Permissions

[Guest]

I have split the database into FE and BE. On my server, there are 3 folders:
FE where the FE is kept, MDE where the MDE file is kept and Tbl where the BE
is kept. What would be the best folder permissions for a user to achieve the
following:

1. Able to run MDE but no access to FE
2. Not able to browse BE folder but yet able to access through the FE

The aim is to prevent users from copying the BE tables to their computers or
to accidentally delete the BE tables. Thanks.

ck

 

[Keith]

I have split the database into FE and BE. On my server, there are 3
folders:
FE where the FE is kept, MDE where the MDE file is kept and Tbl where the
BE
is kept. What would be the best folder permissions for a user to achieve
the
following:

1. Able to run MDE but no access to FE
2. Not able to browse BE folder but yet able to access through the FE

The aim is to prevent users from copying the BE tables to their computers
or
to accidentally delete the BE tables. Thanks.

ck

There are two issues here, NTFS file permissions and Access user-level
security.

If your user* accesses data through the mde then they need no permissions to
the FE file. * Note I stated 'user' because each user needs their own copy
of the mde, but that's a whole other issue.

Grant RWXD permissions to the MDE folder and RWX to the mde file. This will
allow creation and deletion of the ldb file but will stop deletion of the
mde. Same goes for the BE folder and file. You will need to apply Access
user-level security to stop users browsing to the tables in the BE. My web
site has a link to the MS Access user-level security FAQ and to a
sep-by-step example but be prepared to invest a lot of time if you choose to
implement security and to work on *copies* of your files.

Good luck.

Keith.
www.keithwilby.com

 

[Joan Wild]

I have split the database into FE and BE. On my server, there are 3
folders: FE where the FE is kept, MDE where the MDE file is kept and
Tbl where the BE is kept. What would be the best folder permissions
for a user to achieve the following:

1. Able to run MDE but no access to FE

Users don't need any access to the FE folder. Don't have a single copy of
the MDE on the server that everyone uses. Give each user a copy of the MDE
on their computer.

2. Not able to browse BE folder but yet able to access through the FE

You can hide the folder \\server\share$ rather that \\server\share - that
will prevent them from browsing to it via Network Neighborhood. However
savvy users could still find it if they knew the path. All users would need
read/write/create/delete permissions on the BE folder.

 

[Guest]

Thanks, Joan and Keith for your input.
ck

Users don't need any access to the FE folder. Don't have a single copy of
the MDE on the server that everyone uses. Give each user a copy of the MDE
on their computer.


You can hide the folder \\server\share$ rather that \\server\share - that
will prevent them from browsing to it via Network Neighborhood. However
savvy users could still find it if they knew the path. All users would need
read/write/create/delete permissions on the BE folder.