473,756 Members | 4,511 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

User and Group Privileges

I'm attempting to implement User-level security on an Access 2003
database in Access 2000 format and have hit a brick wall. I created a
Workgroup Information File with myself as admin and added users without
any privileges as suggested by Access. Next, I created a Group with only
Read-Only access and added one of the users to that group. I then
assigned a temporary password to each user and finally set a password for
the admin group so access to the database by User Name and password must
be done each time the database is accessed. I did all of the above
without using the wizard. After closing the database and Access, I logged
on the database as one of the new users, supplying their User ID and new
password, so the Workgroup is active. However, that user who is a member
of the Read-Only Group can add, modify records, open the Access Data
Window, etc. Could this be caused by the default admin privileges not
being revoked for the new user, and if so, how are these privileges
revoked?
Dec 19 '07 #1
4 2872
On Wed, 19 Dec 2007 12:02:38 GMT, Don Calloway
<dr********@ver izon.netwrote:

You can't implement workgroup-level security by guessing at the steps.
It's an advanced topic which requires that you download, study, and
fully understand the microsoft security faq.
This link may also help: www.jmwild.com/AccessSecurity.htm

-Tom.

>I'm attempting to implement User-level security on an Access 2003
database in Access 2000 format and have hit a brick wall. I created a
Workgroup Information File with myself as admin and added users without
any privileges as suggested by Access. Next, I created a Group with only
Read-Only access and added one of the users to that group. I then
assigned a temporary password to each user and finally set a password for
the admin group so access to the database by User Name and password must
be done each time the database is accessed. I did all of the above
without using the wizard. After closing the database and Access, I logged
on the database as one of the new users, supplying their User ID and new
password, so the Workgroup is active. However, that user who is a member
of the Read-Only Group can add, modify records, open the Access Data
Window, etc. Could this be caused by the default admin privileges not
being revoked for the new user, and if so, how are these privileges
revoked?
Dec 19 '07 #2
Tom van Stiphout wrote:
On Wed, 19 Dec 2007 12:02:38 GMT, Don Calloway
<dr********@ver izon.netwrote:

You can't implement workgroup-level security by guessing at the steps.
It's an advanced topic which requires that you download, study, and
fully understand the microsoft security faq.
This link may also help: www.jmwild.com/AccessSecurity.htm

-Tom.
I've seen it mentioned that wrkgroup level security has been removed in
A2007. I've talked to some folks that refuse to work with A2007 because
of its removal. I'm sure they have their reasons and opinions.

One of the things I like is the ability to use "currentuse r" to retrieve
the user id instead of getting back "admin". Is "currentuse r" removed
in A2007? Does one use a function like the one found at
http://www.mvps.org/access/api/api0008.htm that returns the Network
login ID for A2007 now?

Just curious.
Dec 19 '07 #3
"Salad" <oi*@vinegar.co mwrote in message
news:13******** *****@corp.supe rnews.com...
>
One of the things I like is the ability to use "currentuse r" to retrieve
the user id instead of getting back "admin". Is "currentuse r" removed in
A2007?
ULS is still supported in A2k7 in the mdb format so I assume that built-in
function will still work.

Keith.

Dec 19 '07 #4
On Wed, 19 Dec 2007 07:47:03 -0800, Salad <oi*@vinegar.co mwrote:

Keith is right. It's only been removed from accdb files.

First time I get the opportunity to work with accdb and security, I
will write a few functions to setup Active Directory based security. I
think that will work great. Then admins can assign users to groups in
AD, and administer security levels that way.

-Tom.
>Tom van Stiphout wrote:
>On Wed, 19 Dec 2007 12:02:38 GMT, Don Calloway
<dr********@ve rizon.netwrote:

You can't implement workgroup-level security by guessing at the steps.
It's an advanced topic which requires that you download, study, and
fully understand the microsoft security faq.
This link may also help: www.jmwild.com/AccessSecurity.htm

-Tom.

I've seen it mentioned that wrkgroup level security has been removed in
A2007. I've talked to some folks that refuse to work with A2007 because
of its removal. I'm sure they have their reasons and opinions.

One of the things I like is the ability to use "currentuse r" to retrieve
the user id instead of getting back "admin". Is "currentuse r" removed
in A2007? Does one use a function like the one found at
http://www.mvps.org/access/api/api0008.htm that returns the Network
login ID for A2007 now?

Just curious.
Dec 20 '07 #5

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

4
3211
by: Tim Daneliuk | last post by:
OK, I've Googled for this and cannot seem to quite find what I need. So, I turn to the Gentle Geniuses here for help. Here is what I need to do from within a script: Given a username and a password (plain text): 1) Validate that the password is correct for that user *without actually logging in*. 2) If the password is valid, return a list of all the groups the user belongs to. Otherwise, return some error string.
1
6129
by: Gary | last post by:
Hello guys! Bear with me,I am newbie. I am trying to limit the privileges of the user PUBLIC has as toughly as possible which means I want to go as far as I can then leave those MUST-HAVE privileges for user PUBLIC. The question is how far I can go? My expectation is once I have done this and I am asked to let my Data
3
3344
by: Evan Smith | last post by:
I have a federated database (7.2 FP11, AIX 4.3) that seems to work fine in most aspects. Today I'm trying to add a new user mapping with the following statement: create user mapping for mngdrq01 server opencases options (remote_authid 'mngdrq01', remote_password 'xxxxx') Querying the federated database works fine as long as the user mentioned above is part of the sysadm group or has dbadm authority. As soon as those authorities are...
1
1579
by: Jani Tamminen | last post by:
We run DB2 UDB v8.1 on Windows. How do I find the list of all users that have the following privileges: 1. User Data Maintenance 2. System Tabale Maintenance
3
2850
by: MLH | last post by:
I was running the following code while logged in as a user belonging only to the Users group. Set usrNew = .CreateUser(Me!UserID) 'The user ID is in a control on the form usrNew.PID = "AAA123456789" usrNew.Password = "password" .Users.Append usrNew
4
12888
by: Feldman Alex | last post by:
Hi all, I need to know the user privileges (does user have administrator privileges) .. Which c# api's should i use? Thanks a lot
1
2752
by: jatinder.saundh | last post by:
Hi, How do I give create database privielege to a specific user/group at a particular db2 instance ? I read about various authorities like SYSCTRL etc. but I am interested in giving only Create database privilege. I also came across GRANT <system privilege statement and it seems I can execute following statement to achieve what I want, GRANT CREATEDBA to <authorization-name>
33
11864
by: JamesB | last post by:
I am writing a service that monitors when a particular app is started. Works, but I need to get the user who is currently logged in, and of course Environment.UserName returns the service logon (NT_AUTHORITY\SYSTEM). I understand that when the service starts, no user may be logged in, but that's ok, as the app I am monitoring can only be run by a logged in user. Do I need to use WMI to get the user context of Explorer.exe or is there a...
3
4677
by: Rahul B | last post by:
Hi, I want to grant only the connect, select, insert, update privileges on all the tables of a schema to a particular user/group Initially, i had revoked all the privileges from public. It seems that the privileges Select, Insert, Update can be given only on a table level and not on the schema level. I can iterate and get the script for the select privileges for all the tables and execute it.
0
9455
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
9271
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
10031
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
9869
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
0
9708
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
6534
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
5302
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
3805
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
2
3354
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.