2003 Database can be opened with default system.mdw

[DaveB]

After creating a new dtabase and system.mdw permissions and security
can be bypassed by opening the database with the default system.mdw for
access 2003. This was not true with access 2000.
Any thoughts

[Rick Brandt]

DaveB wrote:

After creating a new dtabase and system.mdw permissions and security
can be bypassed by opening the database with the default system.mdw
for access 2003. This was not true with access 2000.
Any thoughts

It has always been true when you apply security incorrectly.

ANY time you can open a file without being asked to login you are doing so
as the user "Admin" as a member of the group "Users". Neither of these
entities should have any permissions so this should prevent the file from
opening.

Your file must be granting permission to one or both of these or else
"Admin" still has some ownerships. This last is usually the detail that is
missed. Owners have permissions above and beyond those that you assign to
them.

--
I don't check the Email account attached
to this message. Send instead to...
RBrandt at Hunter dot com

[DaveB]

Once again this was not a problem in Access 2000. With 2003 no matter
what you do to users groups and permissions with a newly created MDW
file those changes are thrown out the window when you open the file
with the default MDW file. The user admin now has controll over the
entire application unless youe set a password for the code or set a
password for the database. The database password is not user friendly
and does not prevent a passworded user from opening the database with
the default MDW and looking at design.

[DaveB]

Sorry I can defeat access 2000