Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Westi on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Complex Database Security Problem

Status
Not open for further replies.

vb6novice

Programmer
Sep 23, 2002
288
US
Please understand that my knowledge of Access security is scant. There is an Access 97 database which was created (and used) by someone who is no longer an employee. An unknown level of security is applied to the database, which resides on a server at company headquarters. Users are at a remote site. The database creator provided the then users with a shortcut to the db which requires a password to login. Once logged in, the the startup form (frmSwitchboard) displays that user's name. A new user user needs to be added, but no one seems to be an Administer of the DB.

When I open the database I am not prompted for a password, and frmSwitchboard displays 'Admin' as the user. frmSwitchboard has 2 buttons to open other forms but clicking either results in a 'You don't have permission to run frmName' and 'To run this object you must have Open/Run permission for it...'. If I open the database holding the Shift key and try to open frmSwitchboard from the database window, I get a similar message (I guess that all means that the user Admin has no rights).

When I go to Tools/Security, all the options are active. In User and Group Permissions, the only user listed is Admin, and Admin has no permissions for any object except the Module, for which Admin has Administer rights. Also, the Owner of every object is listed as <Unknown>, except the Module which is owned by Admin. Attempting to change anything yeilds a 'You don't have permission, blah, blah, blah...' message.

When one of the regular users logs in and goes to Tools/Security, the only options he has are User and Group Accounts and Encrypt/Decrypt. Within User and Group Accounts, he can see the names of the other named users (including the database creator), but buttons for changes are not enabled.

I'm assuming that the database creator gave himself Administer rights, but his network login has been deleted, so trying to log in with his id is not an option. The only other thing I can think to do is change permissions or ownership via code (since I can Administer the Module). But I have no idea how to do that.

All advice/help for this problem is welcome.


 
You need to find the .mdw file with which the .mdb was created/secured. Then open the .mdb using that .mdw (check the command line options, it's something like /wrkgrp "C:\blah\blah\somemdw.mdw" Then give Admins group all permissions for everything, including adminsiter database, then start over with your own security.
--Jim
 
There is a SYSTEM.MDW file in the same folder as the DB, however there are also 2 other mdb files in the same folder which do not have any security. Would it be a good or bad assumption that that SYSTEM.MDW file is the right one?
 
That's probably a good assumption, since normally the .mdw is in c:\windows\system32, and it's not uncommon to keep the .mdw with the .mdb that use it.
--Jim
 
You could use WRKGADM.EXE to create a new workgroup, but it depends how he secured it. If he has removed the Admin rights this may not help.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top