473,326 Members | 2,588 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,326 software developers and data experts.

Security -- Protecting records within a table

Hello!

I have an HR database where we fill out performance reviews. That info
is confidential, but I need a director to be able to see that
information for his/her team members while hiding everyone else's
info.

I can do this through a parameter query that will prompt for a
password and then pull up only the appropriate employees.

My problem is that to do this, I have to put the password in each
record next to the employee's name. What I'd rather do is assign a
password to a director and associate that director with his/her team
members. I'm a little stuck on how to do this, since every director is
also an employee who is subject to a review. Do I need a new table?
Any help is appreciated.

Thanks!

Bill
Nov 12 '05 #1
1 1186
"Pathos Bill" <bu******@jesusanswers.com> wrote in message
news:fd**************************@posting.google.c om...
Hello!

I have an HR database where we fill out performance reviews. That info
is confidential, but I need a director to be able to see that
information for his/her team members while hiding everyone else's
info.

I can do this through a parameter query that will prompt for a
password and then pull up only the appropriate employees.

My problem is that to do this, I have to put the password in each
record next to the employee's name. What I'd rather do is assign a
password to a director and associate that director with his/her team
members. I'm a little stuck on how to do this, since every director is
also an employee who is subject to a review. Do I need a new table?
Any help is appreciated.


You actually need a different database engine. Sensitive data doesn't belong in
an Access/Jet file unless everyone who uses that file is authorized to see
*all* of the data within it. A password system like you're describing would be
trivial to bypass for anyone with even a smattering of experience with Access.
For instance, what would keep a person from just linking to your tables from
another file and viewing everything in them, including passwords? (nothing).

Implementing Access user-level security would be an order of magnitude better
than anything home-cooked that you might attempt, but even that is easily
cracked by anyone willing to acquire the knowledge or tools to do so.
--
I don't check the Email account attached
to this message. Send instead to...
RBrandt at Hunter dot com
Nov 12 '05 #2

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

8
by: Phil Coen | last post by:
I have never tried to build a web site to restrict users. Before, I always wanted everyone to be able to get to everything that I put on one of my sites. So now I am trying to write (actually...
0
by: PayPal | last post by:
<HTML> <HEAD> <META NAME="GENERATOR" Content="Microsoft DHTML Editing Control"> <TITLE></TITLE> </HEAD> <BODY> <STYLE type=text/css> ..dummy {} BODY, TD {font-family:...
3
by: Vic | last post by:
Dear All, I have been developing a small access database, but I am new to security concepts with access. This is a multiuser database, I have a table which will be written by various users...
116
by: Mike MacSween | last post by:
S**t for brains strikes again! Why did I do that? When I met the clients and at some point they vaguely asked whether eventually would it be possible to have some people who could read the data...
16
by: Lyle Fairfield | last post by:
There is an MS-SQL table named Bugs_Comments_and_Suggestions. There is a form named Bugs_Comments_and_Suggestions. To allow John Doe to use this form, we GRANT him LOGIN and ACCESS permissions...
3
by: Br | last post by:
I'm going to go into a fair bit of detail as I'm hoping my methods may be of assistance to anyone else wanting to implement something similar (or totally confusing:) One of systems I've...
0
by: Namratha Shah \(Nasha\) | last post by:
Hey Guys, Today we are going to look at Code Access Security. Code access security is a feature of .NET that manages code depending on its trust level. If the CLS trusts the code enough to...
2
by: Jon Clemmons | last post by:
Hi, I need to set security at the record level of tables and queries. I need to allow some users access to all records in a table but I need to restrict the access of records within that same...
17
by: (PeteCresswell) | last post by:
I've got apps where you *really* wouldn't want to delete certain items by accident, but the users just have to have a "Delete" button. My current strategies: Plan A:...
0
by: DolphinDB | last post by:
Tired of spending countless mintues downsampling your data? Look no further! In this article, you’ll learn how to efficiently downsample 6.48 billion high-frequency records to 61 million...
0
by: ryjfgjl | last post by:
ExcelToDatabase: batch import excel into database automatically...
0
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
1
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
1
by: CloudSolutions | last post by:
Introduction: For many beginners and individual users, requiring a credit card and email registration may pose a barrier when starting to use cloud servers. However, some cloud server providers now...
1
by: Shællîpôpï 09 | last post by:
If u are using a keypad phone, how do u turn on JavaScript, to access features like WhatsApp, Facebook, Instagram....
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.