473,657 Members | 2,597 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

User Level Security in Access 2007

I realize that user level security is not available for Access
databases in the new AK27 format .accdb, and I know that I can still
utilize ULS by making my database an .mdb file.

But I'm wondering WHY Microsoft is scrapping a feature that I've
always found to be extremely useful. Surely they don't expect that
users of the new database format will no longer have a need to assign
permissions at different levels for different users! Why would they
want to make Access LESS powerful for a wide variety of uses?

So I'm thinking they must be thinking that .accdb developers will use
a different method to achieve the functionality previously offered by
ULS. Is the built-in ULS feature unnecessary because the same results
can be achieved using VBA? (Of course, there have always been some
kinds of permissions that can only be managed with VBA -- for example,
ULS can be used to set table-level permissions but not record-level
permissions.)

Also, what are the selling points of the new .accdb format? What
advantages does it have that .mdb does not? I am concerned that if I
develop a new db in the old format that future versions of Access
might not support it.

Thanks for your counsel.
Jun 27 '08 #1
2 4032
On Thu, 8 May 2008 12:51:54 -0700 (PDT), evenlater
<ev*******@gmai l.comwrote:

I think they removed it because it was never very secure. In future I
will implement role-based security based on membership in Active
Directory groups.

-Tom.

>I realize that user level security is not available for Access
databases in the new AK27 format .accdb, and I know that I can still
utilize ULS by making my database an .mdb file.

But I'm wondering WHY Microsoft is scrapping a feature that I've
always found to be extremely useful. Surely they don't expect that
users of the new database format will no longer have a need to assign
permissions at different levels for different users! Why would they
want to make Access LESS powerful for a wide variety of uses?

So I'm thinking they must be thinking that .accdb developers will use
a different method to achieve the functionality previously offered by
ULS. Is the built-in ULS feature unnecessary because the same results
can be achieved using VBA? (Of course, there have always been some
kinds of permissions that can only be managed with VBA -- for example,
ULS can be used to set table-level permissions but not record-level
permissions. )

Also, what are the selling points of the new .accdb format? What
advantages does it have that .mdb does not? I am concerned that if I
develop a new db in the old format that future versions of Access
might not support it.

Thanks for your counsel.
Jun 27 '08 #2
In addition to what Tom has said:

For years, those of us who realized the ease with which a determined cracker
could get past ULS have been advising that if your data was worth US$150 to
you (the cost of password recovery software on the Internet) should use a
server back end for security and that compiling to .MDE would protect your
code. Now, it turns out that the ULS password recovery code can be had for
free, and there is now software, either free or inexpensive, to convert an
..MDE back into a usable .MDB.

With the new ACCDB in Access 2007, access to SharePoint data is enhanced...
it's not truly relational, with referential itegrity, but many companies are
using it, and finding Access a good front-end, just as it has been for
server DBs. And, like server DBs, it has its own data security. There are
additional datatypes, and user interface changes (the latter, you will have
to decide for yourself if it is an advantage or disadvantage). I think
you'll find a longer and more-detailed list of changes at the
http://office.microsoft.com website.

ULS has been convenient for keeping users from stumbling over their own
keystrokes, but that can be coded -- it won't be truly "secure" but will be
about as secure as ULS has turned out to be. In fact, one of my earliest
paying jobs with Access was to implement a "security lite" scheme for just
that purpose, and the client and prime contractor were worried not at all
that it was relatively easy for a knowledgeable Access user to break.

Larry Linson
Microsoft Office Access MVP

"evenlater" <ev*******@gmai l.comwrote in message
news:6d******** *************** ***********@c58 g2000hsc.google groups.com...
>I realize that user level security is not available for Access
databases in the new AK27 format .accdb, and I know that I can still
utilize ULS by making my database an .mdb file.

But I'm wondering WHY Microsoft is scrapping a feature that I've
always found to be extremely useful. Surely they don't expect that
users of the new database format will no longer have a need to assign
permissions at different levels for different users! Why would they
want to make Access LESS powerful for a wide variety of uses?

So I'm thinking they must be thinking that .accdb developers will use
a different method to achieve the functionality previously offered by
ULS. Is the built-in ULS feature unnecessary because the same results
can be achieved using VBA? (Of course, there have always been some
kinds of permissions that can only be managed with VBA -- for example,
ULS can be used to set table-level permissions but not record-level
permissions.)

Also, what are the selling points of the new .accdb format? What
advantages does it have that .mdb does not? I am concerned that if I
develop a new db in the old format that future versions of Access
might not support it.

Thanks for your counsel.

Jun 27 '08 #3

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

29
3451
by: Paul H | last post by:
Why the heck was this dropped? All my dbs use ULS even the complex ones. It aint perfect, it's too fiddly, but it works. How will I be able to say "These users can run these reports and these users can't." in Access 2007? Will I have to create my own tables (tblSecurityGroups, tblSecurityUsers) and code the whole thing? Thanks, Paul
4
8557
by: mrouleau | last post by:
I am sorry if this is the wrong group to ask, if so please point me in the correct direction. My problem is I have an MDB file with user-level security on it (mdw). When i move it over to a system that has Access 2007 and try to open it, I get a user name and password prompt. The admin username and password from the other system doesn't work. Is there anything special I need to do? If I could I would actually love to remove this...
2
2304
by: Sid | last post by:
I hope somebody could help me with this. I have a access database which includes some forms, queries and tables. Once I upload it on to the office network, I was hoping if I could set up security for the database such that certain users can only access certain forms based on their designated office dept. I am not sure how this functionality could be achieved.
7
4231
by: PW | last post by:
Any suggestions, knowledge base articles, books? We are not going to go field level but now we have a couple clients that would like to limit what employees can see of our application (forms and reports). I guess we would need to create a database containing user names and what forms and reports they can access (and then probably going to have to be responsible for that database too <g>.? Thanks, -paulw
4
2868
by: Don Calloway | last post by:
I'm attempting to implement User-level security on an Access 2003 database in Access 2000 format and have hit a brick wall. I created a Workgroup Information File with myself as admin and added users without any privileges as suggested by Access. Next, I created a Group with only Read-Only access and added one of the users to that group. I then assigned a temporary password to each user and finally set a password for the admin group so...
0
267
by: evenlater | last post by:
I realize that user level security is not available for Access databases in the new AK27 format .accdb, and I know that I can still utilize ULS by making my database an .mdb file. But I'm wondering WHY Microsoft is scrapping a feature that I've always found to be extremely useful. Surely they don't expect that users of the new database format will no longer have a need to assign permissions at different levels for different users! Why...
4
5804
by: =?Utf-8?B?QXZhRGV2?= | last post by:
ASP.Net 2. We are migrating to Windows 2008 64 bit Server with IIS 7 from Windows 2003 32 Bit with IIS 6. A few library classes we wrote uses impersonation in code like explained in this article: http://support.microsoft.com/?id=306158#4 This doesn't work in Windows 2008 Server, we receive the following exception:
6
2101
by: plaguna | last post by:
Basically I have Three questions about Jet U-L Security: 1.Every time I create new Groups, new Users and Permissions using the User and Group Accounts dialog box, It creates User security for every single DB Access file I have in my system. How can I get a Jet User-Level Security only for the current opened file without using the User-Level Security Wizard?. 2. Also, Is there a way to view and make changes to Groups and Users opening...
1
1766
by: weirdguy | last post by:
Hello, I currently use Access 2007 but the access file is in 2003 version as I would like to use the User-Level Security as a Control purpose. My project is intended to be use by a Single user. I intend to use the ULS as to control what the User able to access and not be able to access. For an example, User had the only permissions to view, update, delete and add records via Forms - but User unable to access (read & edit) Tables, Query....
0
8305
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
1
8503
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
7321
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
0
5632
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
4151
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
0
4301
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
2726
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
2
1950
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.
2
1607
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.