Security NEEDED

  • Thread starter Thread starter DBarker
  • Start date Start date
D

DBarker

I have a database that I worked for months on and rolled
it out and it has been quite successful. But now one of
my problem users is talking about going to Access class to
learn access, this will just make them have little
knowledge and very dangerous. I currently do not have the
database secured, only a password which the dangerous ones
have that. Any suggestions. It is on the network too.

Thanks,
Debbie
 
Just how dangerous is this user - perhaps you can speak to management about
their mischief?

You can do a fair amount to shut out the curious, however since users need
access to the file, you cannot stop a determined hacker.

There are a number of things you can do:

Backup your database; you can easily lock yourself out playing around with
these features.

Create custom menus/toolbars for use throughout your application.
Create a startup form (a main menu form if you have one) that is opened on
startup.
Use the features in Tools, Startup to
set the startup form
set your default menu (the custom one you made)
disable all the checkboxes about allowing built in menus, toolbars,
changes etc.
hide the db window (ensure the custom menu you create does not
include the Windows, Unhide item
Click on the Advanced button and uncheck the allow special keys
(this will disable the F11 key, among others)

If you need to bypass these startup features, you can hold the shift key
down while you open the db. If you feel that your user may use this to
bypass your settings, you can disable the shift key bypass - there's an
example in help for doing this(look for AllowBypassKey) or at
http://www.mvps.org/access/modules/mdl0011.htm
and
http://www.mvps.org/access/general/gen0040.htm

You can also create a MDE from your database, which will prevent changes to
forms, reports and modules (If you do this, be certain to keep your original
mdb in case you need to make changes).

That may be enough to keep them out while you implement user security.
Download and *study* the security FAQ. Follow the steps outlined exactly.

Finally, I'd suggest that if this person has taken an Access class, they
will learn something. You'd be better off to provide them with the
capability to use their new skills. Frustrating them will only encourage
them to break in. With security you can deny them the ability to delete or
update data, while still allowing them to run Select queries and create
reports.
 
There are many alternatives to using Access Security when it comes to
securing your database.

Making regular backups, hiding your tables, distributing a .mde file,
and/or using the /runtime switch to open the application can help keep
a malicious or curious user from doing much damage.

For a comprehensive look at this issue, Garry Robinson has written a
great book entitled "Real World Microsoft Access Database Protection
and Security". More info is here:
http://vb123.com/map/

A shareware version of a simplified user security add-in - LASsie
(Light Application Security) for MS Access - is available for download
here:
http://www.peterssoftware.com/las.htm

Also, there's the Access Project Security Manager from
databasecreations, Inc.:
http://www.databasecreations.com/prod_apsm.htm

Hope this helps,

Peter De Baets
Peter's Software - MS Access Tools for Developers
http://www.peterssoftware.com
 
Back
Top