Backend is on the server, avoid deleteion of the folder by users

[noorani]

i have split my database b/w front and back ends.

back end is on server , and copy of the front end is
installed to all the users individually. now the problem,

i have created a shortcut to user desktop, and they can execute the front end which is linked to a backend on the server. and every thing works perfectly...


Problem start, user have the access to the BackEnd folder which is on the server , and some time user may delete the whole folder or database without my knowledge.
how can i avoid the user access to the folder where is the backend exist, but in mean while user can execute the fronend database which have the links to this folder then they might need read write and delete rights.

we have a windows 2000 professional server operating system, as a server, and user have different version of windows.

Please advise me.

thanks in advance.

 

[930driver]

In the properties sheet of the folder on the security tab there are advanced settings that will allow you to set permissions (including delete) for users and groups. If you need specific help on this I'd suggest you post in 'Microsoft: Windows 2000 Server'. "The Key, The Whole Key, and Nothing But The Key, So Help Me Codd!"

 

[HighLightUK]

Why dont you just hide the folder on the server, so the users can't see it?

 

[930driver]

HighLightUK,

The user could potentially unhide it from folder options. Security by obfuscation is a hope, not a promise... "The Key, The Whole Key, and Nothing But The Key, So Help Me Codd!"

 

[danvlas]

On the server, set the parent directory as read-only. In this way, the folder is protected and can't be deleted. However, user obviously needs write permission in the back-end folder, I guess you'll have to keep the database open all the time, so nobody can delete it...

Never tried it, but who knows, it may work...

HTH

Daniel Vlas
Systems Consultant

 

[noorani]

The folder on server is a shared folder , and if i make this folder read only then user can not Add or Delete the records on database.. i already have set the rights in my database it means that some user can not access some part of my database. and it work pefectly, but i'm afraid of direct access to the shared folder from the client computer.