Database Security 1

[TriniGal]

Hello,

I have a huge problem, and since this is the first time that I'm trying this, I can't come up with a solution. This is my situation.

My boss wanted me to create a database, that asks for the username and password because he wants to know who is in the database at all times. I did this by using the Workgroup Administrator to create the system.mdw. I then used the security wizard to add users and give them the permissions. This all went fine.

PROBLEM

This database is stored in a folder on a public drive, where our IT department, grants the user that I want access to the files. Within that folder, is another folder where I stored the system.mdw. When I log unto the database, I get asked for my username and password. When I shadow one of my users, and she logs on, she is not asked for her username and password. The system.mdw file is not being opened when the user opens the database.

I am really new to this part of Access and I can't figure out what I'm doing wrong or not doing. I basically followed the instructions from a book.

Can someone please help me.

I thank you so much for you time.

 

[lameid]

If the user can open the database, the database is not secure.

First all workgroup files share a common user, admin. So unless you want a huge backdoor into your system, remove all of admin's explict permissions. Permissions admin has from other groups don't give other workgroups permission as they have no idea about the membership.

With that out of the way (you really need to do this to ensure you know who is in), the problem is that the user is trying to log on with a different workgroup than the one you used to 'secure' your database. There are two solutions...

1) Join each user to the same workgroup (tech support will want to kill you).

2) Create a shortcut that opens the Database with a particular workgroup...

"C:\Program Files\Microsoft Office\Office\MSACCESS.EXE" /wrkgrp "X:\WorkgroupPath\WorkgroupFile.mdw" "X:\DatabasePath\DatabaseFile.mdb"

Make the necessary substitutions and you are on your way.

As a side note the less involved way to know who is logged on is to kick the tech support guys and say, "hey where do you keep a list of which user has which machine?" Then you find a program, LDBview that tells you the access username logged in (Admin as default) and the computer name (I hear notepad works but LDBview refreshes periodically). Then you have to cross reference the machines with the user manually.

 

[TriniGal]

lameid,

I understood everything until you said to do the shortcut. When you said to make the necessary substitutions do you mean I change the firs part of the shortcut according to where the "user's" MSACCESS.EXE file is? Also, I don't understand the last part of your explanation. Can you explain it a little more, please as I am new to all this database security stuff?

Thanks for your time.

 

[lameid]

Shortcut... Right click white space in windows explorer, select the new menu and select shortcut from it... Paste the text I gave you substituting the installation path of office if different and subtitute the path and file names of your workgroup file and database file. If that doesn't do it, your help desk/ IT people should be able to help.

As far as the last part, find ldbview (can be hard to find and I forget where). Run it and open a database that has users in it. You should see what I mean. If you don't know what some particular means, your help desk can probably explain it faster than I can type it.

 

[straybullet]

ldbview can be downloaded at

http://support.microsoft.com/default.aspx?scid=kb;EN-US;176670

Let them hate - so long as they fear... Lucius Accius

 

[TriniGal]

lameid,

In creating the shortcut, since my database is stored on a citrix server, do I use the MSACCESS.EXE file thats on the server, or do I use the one that stored on the user's computer in the "C" drive.

Thanks so much for your patience and help.

 

[lameid]

Use whatever is local to the citrix server... If office is on F:\ use F:\

 

[TriniGal]

Thank you so much for you help and patience. Here's a star.