Security and update rights

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hallo

I hope some one can help me i have the following problem.

i am using normal access security and i have a user which only has insert
access to the table so no update access. What i am trying to do is i have a
form which is used for invoicing. On this form i have i button which does the
following

it go to record next to save the current then it go previous then Prints the
report and set a value in a field to indicate that this invoice has been
printed. Now the problem is that i security is set to not allow update which
i don't want to change. So my question is, is there a way i can give only
update access to this one field and not the complete table. Or any other
ideas on how this can be done.

Thank you
Markus
 
Markus said:
Hallo

I hope some one can help me i have the following problem.

i am using normal access security and i have a user which only has
insert access to the table so no update access. What i am trying to
do is i have a form which is used for invoicing. On this form i have
i button which does the following

it go to record next to save the current then it go previous then
Prints the report and set a value in a field to indicate that this
invoice has been printed. Now the problem is that i security is set
to not allow update which i don't want to change. So my question is,
is there a way i can give only update access to this one field and
not the complete table. Or any other ideas on how this can be done.

Thank you
Markus
Click to expand...

You can use a "Run With Owner's Permissions" update query to do the update
of the field and give the user permissions to that query.
 
Hi Rick

I dont understand how would you do that if i gve them update to the query
they would needs update access to the table to.
 
Markus said:
Hi Rick

I dont understand how would you do that if i gve them update to the
query they would needs update access to the table to.
Click to expand...

That is the whole purpose of a "Run With Owners Permissions" query. The
user is allowed to use the query to do things to the underlying tables that
he has no permission to do directly.
 
Rick

How do you create this query and how do i limite the update access to this
one field only

Markus
 
Markus said:
Rick

How do you create this query and how do i limite the update access to
this one field only
Click to expand...

When you create an Update query you explicitly indicate which fields will be
updated. If you only specify one field then that is the only one that will
be affected. In the property sheet of the query you will see "Run
Permissions" where you can choose "User's" or "Owner's"
 
Rick,

I did that i created a update query that will update this one field query
works fine i have changed the owern to the group users the groups user have
access to read and update date permission on the query but only Read and
Insert permission to the table it self. I still receive a error Record
cannot be edited no update permission on the table. But i dont want the user
to have update permission to the table as its a invoice table and legal
requirments dont allow update access to the table.

i hope you have a idea on what i am doing wrong
Markus
 
Markus said:
Rick,

I did that i created a update query that will update this one field query
works fine i have changed the owern to the group users
Click to expand...

Don't change the owner to the group. Leave the owner of the query as you (I
assume your username has full permissions on the underlying table).
the groups user have
access to read and update date permission on the query
Click to expand...

Sounds good; when they run the query, they are doing so with the query
owner's (your username) permissions. Since your username has permissions on
the table, they'll be able to update.
 
i Dont get it how will the query do the update if the user does not have
update rights on the table.
 
Markus said:
i Dont get it how will the query do the update if the user does not
have update rights on the table.
Click to expand...

Because YOU are the owner of the query and the query runs with "Owner's
Permissions" instead of "User's Permissions".

The concept is very similar to using a Stored Procedure on SQL Server. One
can create an SP on SQL Server that updates a table and give permissions to
that SP to a user who does not have permissions to the table directly. A
RWOP query in Access works the same way.
 
Rick

So if i understand it correctly the owner of the query should be example
Admin group since the admin has update rights to the table but the user does
not then the query will work becuase th owner of the query is admin even do
the owner is not loged on

Markus
 
Markus said:
Rick

So if i understand it correctly the owner of the query should be
example Admin group since the admin has update rights to the table
but the user does not then the query will work becuase th owner of
the query is admin even do the owner is not loged on
Click to expand...

Yes.
 
Markus said:
i Try it give me the same error user has no permisson to the Invoice table
Click to expand...


Who is the owner of the query?
What permission(s) does your user group have on the query?
What permission(s) does the owner of the query have on the tables?
 
The owner is myself who is in the Admin groups with all rights. to the Query
and to the table

The user has insert data rights to the table and update rights on the query.
but when it runs the query it does not complane that the user does not have
access to the query it complains that the user does not have access to the
table.

Markus
 
Markus said:
The owner is myself who is in the Admin groups with all rights. to the Query
and to the table

The user has insert data rights to the table and update rights on the query.
but when it runs the query it does not complane that the user does not have
access to the query it complains that the user does not have access to the
table.
Click to expand...

Is this a SELECT query based on the table or an UPDATE query? All of my
previous messages have been assuming it was an UPDATE query.
 
You assumtions are correct its a update query where i update a yes/no field
to yes to indicate that the invoice has been printed.

Markus
 
Back
Top