Need to secure database

[irishkenj]

Working with Access 2002.

I built an Access database for the school my children attend. Today it resides on one workstation in the principal's office. I had split the database into front-end and back-end early on so that I could just bring in new "releases" of the front-end.

The principal now wants me to put the back-end on a network server (I think it's a Windows server but may be NT) along with a read-only front-end so the teachers can access it from their classrooms.

My original security was going to be to just put a read-only (reports & forms would be read-only) front-end but I'd like to do it right and prevent teachers from updating, i.e. screwing up!, the database.

Would appreciate a pointer to basic security instructions. I've played a little on my home network and managed to lock myself out!!

Thanks for reading and appreciate all the help you folks provide!!!!!

Ken

 

[smedvid]

Just some thoughts....

- You can setup directory level security on the network for the backend. Hopefully, there are network groups established for teachers, and you can assign the directory permissions to that network group.

- For the front-end, consider creating a MDE, where source code is locked. IF MDB is required, you can assign a password to VBA Project Source Code.

- MS Access does offer some security, that I have avoided when at all possible. It is difficult to manage in my opinion.

- Make sure to lock-down the front-end and prevent users from accessing the database window. There are means to remove all menus/toolbars and disable right mouse so users can't enter design mode on a form. Additionally, you can prevent usres from holding down shift-key to enter database design mode.

- If possible consider upgrading to MS SQL Server - perhaps you can acquire a Educational Version at a greatly reduced price. I would then build a MS Access ADP/ADE Application front-end. Having SQL Server affords greater flexibility for securing the database and providing more robust ability to backup. Additionally, you can define database roles and an application id to limit access to the database. The application id would only be available within the MS Access front-end.

htwh,

Steve Medvid
"IT Consultant & Web Master"

http://www.saveourfarm.com

Chester County, PA Residents
Please Show Your Support...

 

[psemianonymous]

Set the share permissions so that anyone accessing the database through Windows file sharing gets read-only access (this means: everyone but the principal). This will take 3 minutes to configure (hint: right-click on My Computer, 'Manage Computer', go over to Shared Folders, right-click on your share folder, I believe it will be the second tab, make sure only 'read' is checked, save, close) and will 100% work, so there's no reason to do all the extra steps.