473,788 Members | 2,725 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Disabling Import/Linking

Hi All,

Firstly, I am aware from reading previous posts that if someone is
determined enough, they will crack an Access Application. However, this
problem seems basic but I can't find a workaround.

I have a frontend/backend database at work which contains some
sensitive information. I have used Access security along with my own and
have disabled the shift key at start-up. I thought this was quite secure
but I have found that someone has hacked into it and given themselves
administrator privileges within my own security. After a lot of
investigation, I have found out that they have done this by creating a
new database under my workgroup and then importing the tables from the
frontend. They can then open up any table they please and have
visibility of everything due to no form being set to start-up..

I have changed the way my security works by splitting the user table
down so that the permissions given to each user is split from their
passwords which they can change and given them only read permissions.

What I want to be able to do is stop people being able to import/link
from either the FE or BE unless they are the administrator. I have spent
hours looking through the help files but can't see any reference to
this.

I am using Access 2002 SP2 on a XP platform.

TIA
Nov 13 '05 #1
3 1901
Hi All,
After countless hours of searching, I think I have found a solution to
my problem from the Microsoft site (
http://support.microsoft.com/?kbid=210329 ). What is suggested is that I
disable the ability to create a new database when using my workgroup. As the
"inquisitiv e" person needs to create the database from within my workgroup
to have permission to import, this seems like the perfect solution.
However, my programming skills are still in their infant stages and the
function provided by Microsoft does not work!!!!! The code below throws up
the following error message when I try to run it: Compile error:
User-defined type not defined.

Could anyone please help me rectify this problem??

Function Remove_DBCreate ()

Dim d As DAO.Database, c As Container, SystemDB As String
SystemDB = "C:\Program Files\Microsoft Office\" & _
"Office\System. mdw" ' Use path for your system.
Set d = DBEngine(0).Ope nDatabase(Syste mDB)
Set c = d.Containers!Da tabases
c.UserName = "Users"
c.Permissions = c.Permissions And Not dbSecDBCreate

End Function

TIA,

Mark

"Mark" <ma*********@nt lworld.com> wrote in message
news:XC******** *****@newsfe3-win.ntli.net...
Hi All,

Firstly, I am aware from reading previous posts that if someone is
determined enough, they will crack an Access Application. However, this
problem seems basic but I can't find a workaround.

I have a frontend/backend database at work which contains some
sensitive information. I have used Access security along with my own and
have disabled the shift key at start-up. I thought this was quite secure
but I have found that someone has hacked into it and given themselves
administrator privileges within my own security. After a lot of
investigation, I have found out that they have done this by creating a
new database under my workgroup and then importing the tables from the
frontend. They can then open up any table they please and have
visibility of everything due to no form being set to start-up..

I have changed the way my security works by splitting the user table
down so that the permissions given to each user is split from their
passwords which they can change and given them only read permissions.

What I want to be able to do is stop people being able to import/link
from either the FE or BE unless they are the administrator. I have spent
hours looking through the help files but can't see any reference to
this.

I am using Access 2002 SP2 on a XP platform.

TIA

Nov 13 '05 #2
Do you have a reference to DAO?
From a code window, click Tools - References.
In the box that comes up, check Microsoft DAO Library.
Be sure to exit by using the OK button.

HTH

"Mark" <ma*********@nt lworld.com> wrote in message
news:iz******** ****@newsfe2-gui.ntli.net...
Hi All,
After countless hours of searching, I think I have found a solution to
my problem from the Microsoft site (
http://support.microsoft.com/?kbid=210329 ). What is suggested is that I
disable the ability to create a new database when using my workgroup. As the "inquisitiv e" person needs to create the database from within my workgroup
to have permission to import, this seems like the perfect solution.
However, my programming skills are still in their infant stages and the function provided by Microsoft does not work!!!!! The code below throws up
the following error message when I try to run it: Compile error:
User-defined type not defined.

Could anyone please help me rectify this problem??

Function Remove_DBCreate ()

Dim d As DAO.Database, c As Container, SystemDB As String
SystemDB = "C:\Program Files\Microsoft Office\" & _
"Office\System. mdw" ' Use path for your system.
Set d = DBEngine(0).Ope nDatabase(Syste mDB)
Set c = d.Containers!Da tabases
c.UserName = "Users"
c.Permissions = c.Permissions And Not dbSecDBCreate

End Function

TIA,

Mark

"Mark" <ma*********@nt lworld.com> wrote in message
news:XC******** *****@newsfe3-win.ntli.net...
Hi All,

Firstly, I am aware from reading previous posts that if someone is
determined enough, they will crack an Access Application. However, this
problem seems basic but I can't find a workaround.

I have a frontend/backend database at work which contains some
sensitive information. I have used Access security along with my own and
have disabled the shift key at start-up. I thought this was quite secure
but I have found that someone has hacked into it and given themselves
administrator privileges within my own security. After a lot of
investigation, I have found out that they have done this by creating a
new database under my workgroup and then importing the tables from the
frontend. They can then open up any table they please and have
visibility of everything due to no form being set to start-up..

I have changed the way my security works by splitting the user table
down so that the permissions given to each user is split from their
passwords which they can change and given them only read permissions.

What I want to be able to do is stop people being able to import/link
from either the FE or BE unless they are the administrator. I have spent
hours looking through the help files but can't see any reference to
this.

I am using Access 2002 SP2 on a XP platform.

TIA


Nov 13 '05 #3
Really simple when you know how isn't it? Thanks very much for your help.
The code runs now and I have achieved what I wanted.

Cheers,

Mark

"MacDermott " <ma********@nos pam.com> wrote in message
news:6D******** *********@newsr ead3.news.atl.e arthlink.net...
Do you have a reference to DAO?
From a code window, click Tools - References.
In the box that comes up, check Microsoft DAO Library.
Be sure to exit by using the OK button.

HTH

"Mark" <ma*********@nt lworld.com> wrote in message
news:iz******** ****@newsfe2-gui.ntli.net...
Hi All,
After countless hours of searching, I think I have found a solution
to
my problem from the Microsoft site (
http://support.microsoft.com/?kbid=210329 ). What is suggested is that I
disable the ability to create a new database when using my workgroup. As

the
"inquisitiv e" person needs to create the database from within my
workgroup
to have permission to import, this seems like the perfect solution.
However, my programming skills are still in their infant stages and

the
function provided by Microsoft does not work!!!!! The code below throws
up
the following error message when I try to run it: Compile error:
User-defined type not defined.

Could anyone please help me rectify this problem??

Function Remove_DBCreate ()

Dim d As DAO.Database, c As Container, SystemDB As String
SystemDB = "C:\Program Files\Microsoft Office\" & _
"Office\System. mdw" ' Use path for your system.
Set d = DBEngine(0).Ope nDatabase(Syste mDB)
Set c = d.Containers!Da tabases
c.UserName = "Users"
c.Permissions = c.Permissions And Not dbSecDBCreate

End Function

TIA,

Mark

"Mark" <ma*********@nt lworld.com> wrote in message
news:XC******** *****@newsfe3-win.ntli.net...
> Hi All,
>
> Firstly, I am aware from reading previous posts that if someone is
> determined enough, they will crack an Access Application. However, this
> problem seems basic but I can't find a workaround.
>
> I have a frontend/backend database at work which contains some
> sensitive information. I have used Access security along with my own
> and
> have disabled the shift key at start-up. I thought this was quite
> secure
> but I have found that someone has hacked into it and given themselves
> administrator privileges within my own security. After a lot of
> investigation, I have found out that they have done this by creating a
> new database under my workgroup and then importing the tables from the
> frontend. They can then open up any table they please and have
> visibility of everything due to no form being set to start-up..
>
> I have changed the way my security works by splitting the user table
> down so that the permissions given to each user is split from their
> passwords which they can change and given them only read permissions.
>
> What I want to be able to do is stop people being able to import/link
> from either the FE or BE unless they are the administrator. I have
> spent
> hours looking through the help files but can't see any reference to
> this.
>
> I am using Access 2002 SP2 on a XP platform.
>
> TIA
>
>



Nov 13 '05 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

0
2585
by: Vio | last post by:
Hi, I've been trying to embed (statically) wxPy alongside an embedded py interpreter on a linux/gtk box. At one point, for some reason misc.o linking reported "multiple definitions of wxGetFreeMemory()". Since wxGetFreeMemory() seemed effectively unused in gtk, I just commented it out in misc_wrap.cpp (didn't want to patch SWIG to regenerate the wrapper code, so hacked the generated cpp source), and replaced...
0
1036
by: Adrian Holovaty | last post by:
Hi, everybody, How can I go about writing an import hook that shows or hides (i.e., does not allow import of) modules within a package based on a defined setting? Here's a basic example of what I'm trying to do, given a package /usr/lib/python2.3/site-packages/hidden/ that has three modules in it (one.py, two.py, three.py):
2
3053
by: Torsten Mohr | last post by:
Hi, is there some description available to overwrite the import hook? By googling i found out so far that i need to overwrite __builtins__.__import__ with something else. Can i also do this with a C function that is provided when using an embedded python interpreter? So my own C program provides this and when linking with python.lib the function is overwritten?
4
3025
by: Steve Jorgensen | last post by:
I'm restarting this thread with a different focus. The project I'm working on now id coming along and will be made to work, and it's too late to start over with a new strategy. Still, I'm not coming to a firm conclusion over whether it was the better approach, and wonder if I should do it differently the next time I'm faced with a similar issue. I needed an app to automatically import from spreadsheets with a semi-dynamic structure,...
3
8774
by: Trev | last post by:
Is there a way to create/manipulate import specs in VBA?
8
6558
by: Nick M | last post by:
Hello All, Excellent info here Thanks! I am very new to using access in general and I am on a learning curve. I'm trying to import an excel workbook (with worksheets) into an access db via a macro. (I'll get to using VB later on). What I would like to do is import a single workbook w/three seperate worksheets into three seperate access tables AND truncate the time stamp that is used in the excell sheet via a macro.
2
6586
by: veaux | last post by:
Peeked around here but didn't really see an explanation as to the varied "Invalid Argument" errors that appear in Access sometimes. I'm using Access 2003 and trying to import an Access table of ~200,000 records into my DB. I've tried importing, linking, exporting the original table to txt and importing or linking to that. Then I tried exporting the table to it's own DB (which worked) but still cant then import or link to the DB I'm using....
5
1513
by: kuratkull | last post by:
Hello, *************** import urllib2 import re import string import sys url = "http://www.macgyver.com/" request = urllib2.Request(url)
3
1387
by: Koen Vossen | last post by:
A project I'm currently working on uses Turbogears as a framework. I'd like to interact with it using the tg-admin shell. We also use gettext's _() function for internationalization. Now, this function is overwritten in interactive mode, which causes annoying exceptions. Is it possible to disable this behavior?
0
9656
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
9498
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
10373
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
9969
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
1
7519
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
6750
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
5538
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
4074
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
2
3677
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.