A-97 Alzheimer moment... what were the basic components of securing an app?

[MLH]

1) Create secure workgroup system database, remove user
ADMIN from the ADMINs group
2) Encrypt the source MDB front end database
3) Create 'n distribute MDE from the encrypted MDB

Is that all? Or, am I forgetting some step(s)?

If I can ask, what exactly does ENCRYPTing do to an
unencrypted MDB file?

[Tim Marshall]

MLH wrote:

1) Create secure workgroup system database, remove user
ADMIN from the ADMINs group
2) Encrypt the source MDB front end database
3) Create 'n distribute MDE from the encrypted MDB

Is that all? Or, am I forgetting some step(s)?

If you're asking, then don't try it. You *will* regret it.

Read the security FAQ available at
http://support.microsoft.com/default...b;en-us;165009

Read it carefully and ensure you understand it.

Don't try messing with security without reading and understanding this
document. It's very, very easy to think you've secured an mdb and not
have done so.

DId I say read the security FAQ? Don't ask any more questions until
you've downloaded this and read it and understand it. RTFM, etc.

That's all I'll say.
--
Tim http://www.ucs.mun.ca/~tmarshal/
^o<
/#) "Burp-beep, burp-beep, burp-beep?" - Quaker Jake
/^^ "Whatcha doin?" - Ditto "TIM-MAY!!" - Me

[Albert D. Kallal]

> If I can ask, what exactly does ENCRYPTing do to an

unencrypted MDB file?

ENCRYPTing is a separate issue from ms-access "workgroup" security (you can
encrypt..but not use workgroup security).

What encrypting does is scramble the "text" inside of the mdb file. So, if
you open up the mdb file with a "file" editor, or a "hex" editor to view the
"raw" text, you will see the contents scrambled.

Even for databases that I implement security, the first thing I turn off is
that encryption. Why? Because then winzip, or in my case "inno install" does
NOT compress the mde file by any amount.

So, if you are not worried about users looking at the file with a "file"
editor, then you best turn off encryption, as then winzip etc. can compress
the file for emailing, or downloading from a web site.
--
Albert D. Kallal (Access MVP)
Edmonton, Alberta Canada
pl************* ****@msn.com
http://www.members.shaw.ca/AlbertKallal