Log in Form select query

  • Thread starter Thread starter Gavin Webb
  • Start date Start date
G

Gavin Webb

Hi,

I have a Log in form, which has two text boxes to capture
User Name and Password.

TxtUserName
TxtPassword

and a Command button to click when both fields have been
completed.

I have a table with User name, Password and Security Level
in.

tbl_Users.USRName
tbl_Users.USRPassword
tbl_Users.USRSecLevel

First, how do I use the value entered in the text box to
look up the user name in the table and return the values
to use in future queries.

Then, I have to check the password, but I will be able to
work that out if someone can help me with the first step,
above.

Thanks for any help at all
Gavin
 
Gavin Webb said:
I have a table with User name, Password and Security Level
in.

tbl_Users.USRName
tbl_Users.USRPassword
tbl_Users.USRSecLevel

First, how do I use the value entered in the text box to
look up the user name in the table and return the values
to use in future queries.

Then, I have to check the password, but I will be able to
work that out if someone can help me with the first step,
above.
Click to expand...

Gavin,

if you really need security in your DB, use Access security.
Everything else is just cosmetics, it can be cracked in seconds by
anyone knowing Access, say, higher beginner to intermediate level.

Best regards
Emilia

Emilia Maxim
PC-SoftwareService, Stuttgart
http://www.maxim-software-service.de
 
I've looked at that.
I had it working fine on my PC, it was asking for logon
and password etc. When I accessed the database from
another PC on the network, it just let me straight in.
I guess it means I have to change settings on every users
PC.
As I don't know exactly who is going to be using it yet
and the users are spread over many sites, this is not
really an option.

Also, I could only figure out how to restrict access to
whole forms and tables, not individual controls and fields.

The whole project is very vague at the moment, so I need
to be able to change things at every step of the way when
I eventually get the details I need.

Thanks anyway
Gavin
 
Gavin Webb said:
I've looked at that.
I had it working fine on my PC, it was asking for logon
and password etc. When I accessed the database from
another PC on the network, it just let me straight in.
I guess it means I have to change settings on every users
PC.
Click to expand...

Gavin,

this means you probably left the Admin user (or group) created by
defualt with full rights. Normally, when using Access security, each
app has its own MDW file, not SYSTEM.MDW. If you used the standard
SYSTEM.MDW, or just copied it under another name, then such intrusions
can happen. Also if the Admin user - which cannot be deleted - still
has all rights.

You don't need settings for each user, you can create adequate groups
and assign every user to the groups as needed. Probably you would have
about 2-3 groups (normal user, power user, developer).

The Access Security FAQ is a bit hard to understand, but there is
nothing nearly so secure than Access security. So the usual advice is:
1. read the FAQ carefully
2. read the FAQ again carefully, making notes
3. make a copy of the DB (very important)
4. proceed with creating a brand new MDW, creating groups etc. and
securing the DB.

There is also a wizard to secure the DB.
As I don't know exactly who is going to be using it yet
and the users are spread over many sites, this is not
really an option.
Click to expand...

If there is a network server with the backend DB, the MDW file should
be stored in the same folder. Then you can make a desktop shortcut on
every PC needing the app specifying the MDW file in the command line
(argument /wrkgrp IIRC). This way you only need to update once the MDW
file if a new user needs to be defined, regardless on which PC.
Also, I could only figure out how to restrict access to
whole forms and tables, not individual controls and fields.
Click to expand...

That's another problem which could be handled as a 'follow up'. Access
could take care of forms, queries, reports etc. and you could use the
same login names for a refined rights management.

Best regards
Emilia

Emilia Maxim
PC-SoftwareService, Stuttgart
http://www.maxim-software-service.de
 
Back
Top