problem with mdw!!!!

[Giorgos Louloudis via AccessMonster.com]

Hello there!
Well i am so desperate for a solution here although i believe it's a bug of
access.I have access 2003 on my xp laptop.I created an mdb file on which i
want to place some users with different rights.i did everything well.I
created a new mdw on which i left user Admin only with user rights(after i
created a new Administrator user).Using the wizard i did not leave the group
users have any right.The owner has changed to the new administrator.When i
close and open again the mdb i get prompted for username and password.When i
try to use Admin i am blocked saying that i must contact the administrator to
give me rights(everything works fine until here).Now i think let's test the
system.I open the access application(not my mdb)and change with the workgroup
administrator utility the mdw i used to the old one(system.mdw) and close the
application.Now i open again the mdb file and IT OPENS without prompting for
a username.I check the user-level permissions and i see that the only user
admin (don't forget i use the system.mdw and not the one i created) has NO
rights to any oobject even open database.,How cal i safely lock my database
then?

 

[Keith]

Hello there!
Well i am so desperate for a solution here although i believe it's a bug
of
access.I have access 2003 on my xp laptop.I created an mdb file on which i
want to place some users with different rights.i did everything well.I
created a new mdw on which i left user Admin only with user rights(after i
created a new Administrator user).Using the wizard i did not leave the
group
users have any right.The owner has changed to the new administrator.When i
close and open again the mdb i get prompted for username and password.When
i
try to use Admin i am blocked saying that i must contact the administrator
to
give me rights(everything works fine until here).Now i think let's test
the
system.I open the access application(not my mdb)and change with the
workgroup
administrator utility the mdw i used to the old one(system.mdw) and close
the
application.Now i open again the mdb file and IT OPENS without prompting
for
a username.I check the user-level permissions and i see that the only user
admin (don't forget i use the system.mdw and not the one i created) has NO
rights to any oobject even open database.,How cal i safely lock my
database
then?

I've never used the wizard so can't comment on how effective it is, but the
symtoms you describe point to the "users" group still having permissions to
the "database" object.

Regards,
Keith.
www.keithwilby.com

 

[Giorgos Louloudis via AccessMonster.com]

Keith there is a step in the wizard asking whether you want to give any
permissions to the group users and i give no perimissions!!I have a thought
that this has to do with the fact that although u make the user Admin only
belong to the group users(which does not have any permission in the new mdw),
when i join the system.mdw this user also exist and as a group of users can
go in the database because in this mdw the users group has full permissions
(the system.mdw is the default mdw that access creates when u install it).
Don't forget that i did all the steps being described in the faq on security
of microsoft's site..
Thanks for your time Keith!!

Hello there!
Well i am so desperate for a solution here although i believe it's a bug

[quoted text clipped - 22 lines]

database
then?

I've never used the wizard so can't comment on how effective it is, but the
symtoms you describe point to the "users" group still having permissions to
the "database" object.

Regards,
Keith.
www.keithwilby.com

 

[Keith]

Keith there is a step in the wizard asking whether you want to give any
permissions to the group users and i give no perimissions!!

But have you specifically checked what permissions the users group has to
the database object, that the wizard has done what it claims to have done?

I have a thought
that this has to do with the fact that although u make the user Admin only
belong to the group users(which does not have any permission in the new
mdw),
when i join the system.mdw this user also exist and as a group of users
can
go in the database because in this mdw the users group has full
permissions

This isn't the case because the object permissions are stored in your mdb,
*not* the mdw.

(the system.mdw is the default mdw that access creates when u install it).
Don't forget that i did all the steps being described in the faq on
security
of microsoft's site.

I'm still not convinced ) Have a look at the example on my website, it
may help.

Thanks for your time Keith!!

No problem.
Keith.
www.keithwilby.com

 

[TC]

There is absolutely no chance whatever - zero, zip, nada, nil - that
this is a "bug".

Access security is a complex topic. The only way to get it right, is to
follow a written list of explicit instructions - adding and omitting
nothing. Clearly you aren't doing that, because you've done a number of
basic things wrongly.

Try the Access Security FAQ, often referenced in this newsgroup.

HTH,
TC