in message:
uhm...let me better explain what I did:
I have never changed my default mdw: I always use shortcuts to manage
secured database.
So I opened a secured database through shortcuts.
From within this database I clicked file>new>new blank database. Than I
saved it on my desktop. I thought this way the new Db should be secured as
well, and that it needs to use the same mdw file as the secured DB.
This new database doesn't have a shortcut, so when I open it should ask for
user id and password to log in. That's if it was secured. Right?
Besides, the mdw file used for the secured DB has very strict permission
rules: Admin is in the Users Group only and this group doesn't have any
permission.
Instead, what is happened is that I'm able to open the new Db while joined
the system.mdw (as I told you I'm always joined to the system.mdw since I use
shortcut to manage the mdw files I create to secure databases).
Hope it is more clear.
Hi Rocco,
Hope you don't mind me stepping in.
I think I see where you are going with this. You might be under the assumption that following your
exact steps above will "magically" properly *secure* the entire new database file that you just
created. Not quite, you still need to take some additional steps on this file. Perhaps an
illustration will help.
1. Using your custom shortcut, log into your secured database file with your custom workgroup file.
2. Go to File | Close so this database will close, but Access will remain open. You should still be
using (but not joined) to the custom workgroup file.
3. Go to File | New and create a new database. Create one quick dummy form and save it. Now close
the database and Access all together.
4. Now double click on this new database file. By doing it this way, Access will log you in as Admin
using the system.mdw file. You will of course notice that you can get into the database and not be
presented with a login screen.
So why does this happen you say?
Well, you must remember that *permissions* are stored within the database file itself and
Users/Groups and their passwords are stored within the workgroup file. When you create a new
database file there are certain things that Access does by default. To see some of these defaults,
follow these steps below.
1. Using your custom shortcut, log into your secured database file with your custom workgroup file.
2. Go to File | Close so this database will close, but Access will remain open. You should still be
using (but not joined) to the custom workgroup file.
3. Go to File | Open and open that new database.
4. Now go to Tools | Security | User And Group Permissions. Take a look at what the Permissions are
for the **Database** object itself. You will notice that the Users *Group* has full permissions to
the Database object. That is why you can, for now, log into this database using the system.mdw.
Access logs you in as Admin who is a member of the Users Group in **both** the custom workgroup file
AND the system.mdw file. Since the Users Group has full permissions (at the moment), you can open
the database file and not get prompted for a login. Ahhhh haaaa!
Does that make sense? For ALL new databases you will still need to do some securing of the various
database objects. Access by default will always give full permissions to the Database object for any
new databases. You will always need to remove this permission.
Hope that helps,
