473,385 Members | 1,402 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,385 software developers and data experts.

Importing from secured frontend

All,
As you can see below, I have had problems with inquisitive souls looking
at data they shouldn't be. I though disabling the ability to create new
databases using my workgroup would stop this but it doesn't. All they have
to do now is create a new database using the default wrkgroup, close it and
then open it again whilst joined to my workgroup and they can import again.
Can someone please help me stop these people importing from the FE or BE?

Many thanks,

Mark

"MacDermott" <ma********@nospam.com> wrote in message
news:6D*****************@newsread3.news.atl.earthl ink.net...
Do you have a reference to DAO?
From a code window, click Tools - References.
In the box that comes up, check Microsoft DAO Library.
Be sure to exit by using the OK button.

HTH

"Mark" <ma*********@ntlworld.com> wrote in message
news:iz************@newsfe2-gui.ntli.net...
Hi All,
After countless hours of searching, I think I have found a solution
to
my problem from the Microsoft site (
http://support.microsoft.com/?kbid=210329 ). What is suggested is that I
disable the ability to create a new database when using my workgroup. As

the
"inquisitive" person needs to create the database from within my
workgroup
to have permission to import, this seems like the perfect solution.
However, my programming skills are still in their infant stages and

the
function provided by Microsoft does not work!!!!! The code below throws
up
the following error message when I try to run it: Compile error:
User-defined type not defined.

Could anyone please help me rectify this problem??

Function Remove_DBCreate()

Dim d As DAO.Database, c As Container, SystemDB As String
SystemDB = "C:\Program Files\Microsoft Office\" & _
"Office\System.mdw" ' Use path for your system.
Set d = DBEngine(0).OpenDatabase(SystemDB)
Set c = d.Containers!Databases
c.UserName = "Users"
c.Permissions = c.Permissions And Not dbSecDBCreate

End Function

TIA,

Mark

"Mark" <ma*********@ntlworld.com> wrote in message
news:XC*************@newsfe3-win.ntli.net...
> Hi All,
>
> Firstly, I am aware from reading previous posts that if someone is
> determined enough, they will crack an Access Application. However, this
> problem seems basic but I can't find a workaround.
>
> I have a frontend/backend database at work which contains some
> sensitive information. I have used Access security along with my own
> and
> have disabled the shift key at start-up. I thought this was quite
> secure
> but I have found that someone has hacked into it and given themselves
> administrator privileges within my own security. After a lot of
> investigation, I have found out that they have done this by creating a
> new database under my workgroup and then importing the tables from the
> frontend. They can then open up any table they please and have
> visibility of everything due to no form being set to start-up..
>
> I have changed the way my security works by splitting the user table
> down so that the permissions given to each user is split from their
> passwords which they can change and given them only read permissions.
>
> What I want to be able to do is stop people being able to import/link
> from either the FE or BE unless they are the administrator. I have
> spent
> hours looking through the help files but can't see any reference to
> this.
>
> I am using Access 2002 SP2 on a XP platform.
>
> TIA
>
>



Nov 13 '05 #1
3 1786
"Mark" <ma*********@ntlworld.com> wrote:
I have had problems with inquisitive souls looking
at data they shouldn't be. I though disabling the ability to create new
databases using my workgroup would stop this but it doesn't. All they
have to do now is create a new database using the default wrkgroup,
close it and then open it again whilst joined to my workgroup and they
can import again. Can someone please help me stop these people
importing from the FE or BE?


Hi Mark,

If a casual user can create a new database using your own customised mdw
file and no hacking tools then the user-level security hasn't been
implemented correctly.

Have you implemented your security as per the MS KB item
<http://support.microsoft.com/default...access%2fconte
nt%2fsecfaq.asp> ?

Have you assigned a password to your Admin account and denied the 'users'
group access to the 'database' object?

Regards,
Keith.
www.keithwilby.org.uk
Nov 13 '05 #2
Hi Keith,
Neither of the groups (Admin/Users) have access to use anything from the
frontend or backend. I have created 2 user accounts, one for myself with
administrator privileges and a general user account with limited access.I
have given the general user account read permissions on all the tables they
need and then controlled what they can and can't do with my own security.
None of the objects in the database can be imported, only the tables because
by default, as soon as you give someone permission to read a table, they
have by default, permission to read the design. Both user accounts have a
password.

I didn't set all the permissions using the wizard but I have spent hours
going through all the permissions on all objects within the database and
general users only have what they need. With all this in place, a general
user can create a new DB using the default MDW. They can then open Access,
join my workgroup and then open their newly created DB and import all tables
they have read permission on. No-one can do this unless they are a member of
my workgroup!!!!!

Am I missing something?

Mark
"Keith Wilby" <ke*********@AwayWithYerCrap.com> wrote in message
news:Xn************************@10.15.188.42...
"Mark" <ma*********@ntlworld.com> wrote:
I have had problems with inquisitive souls looking
at data they shouldn't be. I though disabling the ability to create new
databases using my workgroup would stop this but it doesn't. All they
have to do now is create a new database using the default wrkgroup,
close it and then open it again whilst joined to my workgroup and they
can import again. Can someone please help me stop these people
importing from the FE or BE?


Hi Mark,

If a casual user can create a new database using your own customised mdw
file and no hacking tools then the user-level security hasn't been
implemented correctly.

Have you implemented your security as per the MS KB item
<http://support.microsoft.com/default...access%2fconte
nt%2fsecfaq.asp> ?

Have you assigned a password to your Admin account and denied the 'users'
group access to the 'database' object?

Regards,
Keith.
www.keithwilby.org.uk

Nov 13 '05 #3
"Mark" <ma*********@ntlworld.com> wrote:
I
have given the general user account read permissions on all the tables


Hi Mark,

Don't do this. Instead, use queries with the 'Run permission' property set
to 'Owner's'. This will deny the account's users access to the tables but
they can still retrieve the data via the queries.

Regards,
Keith.
Nov 13 '05 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

4
by: Little PussyCat | last post by:
Hello, I nee to write something that will transfer excel data into an SQL Server table. I have for another database application I wrote have it importing Excel spreadsheet data using cell by...
4
by: Norman Fritag | last post by:
Hi there, I would like to retrieve of a secured database the Username and the group that he / she belongs to, to apply access rights to some button click events, which are accessing forms that...
3
by: patcho | last post by:
Hello, I have a problem that I was hoping to get some assistance with. I have built a split database (back end with all the tables and a password to protect the information & a front end to link...
2
by: enrio | last post by:
I need to process the source code associated with the forms outside access, and import the changes back to Access. I find that I can export the source code of a form, but when I subsequently...
2
by: VB Programmer | last post by:
I want to write a file to the "secured" dir that is on my website. The full path is: C:\inetpub\wwwroot\MyWebSite\Secured I tried this, but it didn't work: Dim strFileName As String =...
1
by: robert d via AccessMonster.com | last post by:
I'm trying to determine who is linked to the backend. I'm using the Microsoft code on the Jet User Roster that uses ado to develop a list. The front end and backend are secured. This code is to...
2
by: Daniel Frechette | last post by:
Hi, Is it possible to have secured (SSL/HTTPS) and non-secured (HTTP) content in the same page without breaking the security? I am developing a secured reservation system in which the user can...
1
by: securedcardss | last post by:
http://card.2youtop.info secured credit card card credit instant secured card cash credit secured card
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...
0
by: ryjfgjl | last post by:
In our work, we often need to import Excel data into databases (such as MySQL, SQL Server, Oracle) for data analysis and processing. Usually, we use database tools like Navicat or the Excel import...
0
by: taylorcarr | last post by:
A Canon printer is a smart device known for being advanced, efficient, and reliable. It is designed for home, office, and hybrid workspace use and can also be used for a variety of purposes. However,...
0
by: aa123db | last post by:
Variable and constants Use var or let for variables and const fror constants. Var foo ='bar'; Let foo ='bar';const baz ='bar'; Functions function $name$ ($parameters$) { } ...
0
by: ryjfgjl | last post by:
In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...
0
by: emmanuelkatto | last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel
0
BarryA
by: BarryA | last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
1
by: Sonnysonu | last post by:
This is the data of csv file 1 2 3 1 2 3 1 2 3 1 2 3 2 3 2 3 3 the lengths should be different i have to store the data by column-wise with in the specific length. suppose the i have to...
0
by: Hystou | last post by:
There are some requirements for setting up RAID: 1. The motherboard and BIOS support RAID configuration. 2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.