Security Problem with Adobe 7.0

[rdemyan via AccessMonster.com]

I've implemented workgroup security and have Admins and PowerUsers group
(Users group does not have any permissions to view tables and I use RWOP
queries).

Everything was fine until one of my clients IT shops started installing Adobe
7.0 Professional on some of the machines.

My PowerUsers group (not Admins group) is getting the exclusive message when
they log in that they have to click through about 15 to 30 times.

Now anyone reading this is going to say, it's the Adobe toolbar, just
reinstall Adobe and don't click the option to have the Adobe toolbar install
on Access.

Won't work for my client because users have no administrative rights to
Windows. The IT people (they're contractors) say they've done their job and
are not going to reinstall Adobe 7.0. It works for all other software
programs and they could care less about my Access program.

OK, so I read a post where supposedly the real issue is that members of a
group other than Admins might not have permissions to change the DB design.
So I thought it was a read/design issue. I've tried increasing the rights my
PowerUsers have. I've now given them all rights to administer every type of
object including the DB and the error message still pops up.

If this would have worked it is not really a problem for my database because
I distribute a .mde file (which cannot be changed by anyone) and because I
use custom toolbars depending upon the group the user belongs.

So, I thought, if it's an Access design issue when Adobe tries to muscle its
icons onto my toolbar, I'll just give PowerUsers all design rights, which
they'll never be able to use because of the .mde file and custom toolbars.

BUT IT DIDN'T WORK! And now I'm worried. I don't understand why it didn't
work. Anybody in the Admins group who logs on does not get this message.
But I can't just make everyone a member of the Admins group because they will
now have access to a toolbar which they should not have any access to.

Can someone please help me. Please remember, getting Adobe reinstalled is
not an option and also remember that my users have no Windows administrator
rights and cannot change the registry.

Thanks for any help, suggestions,etc.

 

[Guest]

Windows. The IT people (they're contractors) say they've done their

job are not going to reinstall Adobe 7.0. It works for all other software

-xxxxx- They have handed you a wooden nickel, and that's not their
problem? If they can't do their job properly, they should get out of
business. And why should your company have to pay for something
they should have warned you about before they did the work?

Any way, the message is about 'exclusive access'. That means no
shared mde, and they need to have the 'open exclusive' permission
as well as db admin permission.

It also means that they need read/write/modify/create/delete permission
on the mde folder.

Have you decided if it is an Access Permissions problem or a Windows
Permissions problem? If you are logged into windows as one person,
and log into the db as a different person, do you get the same problem?

The only other suggestion I can think of is RWMCD permission on the
MDW file Users are sometimes locked out of that. Menu stuff used to be
in the MDW, but I only suggest that on the off chance that there might be
something stupid going on.

(david)

 

[rdemyan via AccessMonster.com]

David,

Thanks for the response. It looks like the problem goes away if all of my
users have Open Exclusive permission. Previously only Admins had this
permission, not PowerUsers. That's why users in the Admins group never have
the problem with Adobe 7.0. I only just discovered that I need to provide
PowerUsers with the exclusiive access permission. In my attempts to solve
the problem I have given the PowerUsers all other permissions that Admins
have as well. I am planning to dial these "other" permissions (other than
exclusive access) back since I don't really want the PowerUsers to have these
permissions. I won't be on site till next week and I'll report back on
exactly which permissions I had to provide to the PowerUsers group in order
to make the Adobe 7.0 problem go away.

How do you grant RWMCD permissons on the .mdw file. My custom toolbars only
allow users in the Admins group to see my own custom form for
creating/modifying, etc. users. I know they can get around it if they really
want to, but I don't think any of them know how.

Again, thanks for the response.

Windows. The IT people (they're contractors) say they've done their
job are not going to reinstall Adobe 7.0. It works for all other software

-xxxxx- They have handed you a wooden nickel, and that's not their
problem? If they can't do their job properly, they should get out of
business. And why should your company have to pay for something
they should have warned you about before they did the work?

Any way, the message is about 'exclusive access'. That means no
shared mde, and they need to have the 'open exclusive' permission
as well as db admin permission.

It also means that they need read/write/modify/create/delete permission
on the mde folder.

Have you decided if it is an Access Permissions problem or a Windows
Permissions problem? If you are logged into windows as one person,
and log into the db as a different person, do you get the same problem?

The only other suggestion I can think of is RWMCD permission on the
MDW file Users are sometimes locked out of that. Menu stuff used to be
in the MDW, but I only suggest that on the off chance that there might be
something stupid going on.

(david)

I've implemented workgroup security and have Admins and PowerUsers group
(Users group does not have any permissions to view tables and I use RWOP

[quoted text clipped - 39 lines]

Thanks for any help, suggestions,etc.

 

[Guest]

I'm glad that you've fixed the problem. You may need to
also leave them with db admin permission (since some
db properties can only be changed if you have db admin),
but probably not required for this. (Note, db admin
permission does not allow anyone to 'administer' the
database. That is controlled by membership of the Admins
group).

Since you've fixed the problem, you don't need to play
around with file permissions. Your mdw file permissions
are correct. I only suggested that on the off chance that
there was something strange going on, and I couldn't test
here.

(david)

David,

Thanks for the response. It looks like the problem goes away if all of my
users have Open Exclusive permission. Previously only Admins had this
permission, not PowerUsers. That's why users in the Admins group never have
the problem with Adobe 7.0. I only just discovered that I need to provide
PowerUsers with the exclusiive access permission. In my attempts to solve
the problem I have given the PowerUsers all other permissions that Admins
have as well. I am planning to dial these "other" permissions (other than
exclusive access) back since I don't really want the PowerUsers to have these
permissions. I won't be on site till next week and I'll report back on
exactly which permissions I had to provide to the PowerUsers group in order
to make the Adobe 7.0 problem go away.

How do you grant RWMCD permissons on the .mdw file. My custom toolbars only
allow users in the Admins group to see my own custom form for
creating/modifying, etc. users. I know they can get around it if they really
want to, but I don't think any of them know how.

Again, thanks for the response.

Windows. The IT people (they're contractors) say they've done their
job are not going to reinstall Adobe 7.0. It works for all other

software

-xxxxx- They have handed you a wooden nickel, and that's not their
problem? If they can't do their job properly, they should get out of
business. And why should your company have to pay for something
they should have warned you about before they did the work?

Any way, the message is about 'exclusive access'. That means no
shared mde, and they need to have the 'open exclusive' permission
as well as db admin permission.

It also means that they need read/write/modify/create/delete permission
on the mde folder.

Have you decided if it is an Access Permissions problem or a Windows
Permissions problem? If you are logged into windows as one person,
and log into the db as a different person, do you get the same problem?

The only other suggestion I can think of is RWMCD permission on the
MDW file Users are sometimes locked out of that. Menu stuff used to be
in the MDW, but I only suggest that on the off chance that there might be
something stupid going on.

(david)

I've implemented workgroup security and have Admins and PowerUsers group
(Users group does not have any permissions to view tables and I use

RWOP
[quoted text clipped - 39 lines]

Thanks for any help, suggestions,etc.