Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Westi on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Prevent Users from seeing the MS-Query module

Status
Not open for further replies.

sxschech

Technical User
Jul 11, 2002
1,033
US
I have set up some excel files to display data provided by MS-Query and would like to give the file to the users so that they can perform the "Data", "Refresh Data" themselves. However, for security reasons, would like to know if it is possible to prevent the users from clicking on "Data", "Import External Data" and clicking on "New Database Query" or "Edit Query"? ITS is concerned that the user could go in and then do a select *. ITS is handling security at the backend, however they pointed out that this still won't stop them from a select * on the tables they have permission to as they can't lock down specific fields.
 
I am not sure if you can remove those menu options or restrict their use but why not create database views which contain only the dataset required by the user(s) and grant those users access only to the view(s) they need?

(This way -- even if they edit the query they cannot get outside of the pre-constrained data)

-- Jason
"It's Just Ones and Zeros
 




I would remove MS Query, assuming that your users could use it to add their own queries, and rather, use ADO to query your data sources. It can ALL be contained in VBA and locked with a password. To pursue this kind of solution, post in Forum707.

Skip,
[glasses]Don't let the Diatribe...
talk you to death![tongue]

[glasses]Just traded in my old subtlety...
for a NUANCE![tongue]
 
Jason:
I am not in the department that sets up views and permissions. I am the person the end user goes to for report requests and then if I need additional data sources, I contact IT. Because of the way the user wanted the data, we were looking for ways for him to get it more directly than having me run it for him without having to involve IT beyond its normal role.

Skip:
OK, I'll repost in Forum 707.
 
The view setup would only need to be done once, maintenance would be minimal. (In my world -- this, data security and accessibility, is IT's normal role)

-- Jason
"It's Just Ones and Zeros
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top