action depending on user

[susan]

Hi,

A user logs on to the application. When the password is checked in the table
Users I use the field user_id from that table to determine his rights in my
application. So I display only those records of a table WHERE RelationOf
LIKE user_id.

Can I use this method safely? What if 3 or 4 users are using the application
simultanuesly? Can Access 2003 keep them apart or is it possible that
user_id 3 gets the data of say user_id 2 ?

I tested it and didn't get errors so far which doesn't mean it's OK though.

Does anyone has any experiance or knoledge about this topic?

Sorry for my english.

Thanks,
Susan

[Keith Wilby]

"susan" <vd*@hotmail.comwrote in message
news:ac***************************@cache1.tilbu1.n b.home.nl...

Hi,

A user logs on to the application. When the password is checked in the
table Users I use the field user_id from that table to determine his
rights in my application. So I display only those records of a table WHERE
RelationOf LIKE user_id.

Can I use this method safely? What if 3 or 4 users are using the
application simultanuesly? Can Access 2003 keep them apart or is it
possible that user_id 3 gets the data of say user_id 2 ?

I tested it and didn't get errors so far which doesn't mean it's OK
though.

Does anyone has any experiance or knoledge about this topic?

Sorry for my english.

Thanks,

Sounds perfectly fine to me Susan but bear in mind that a home-grown
security solution may likely be weaker that the built-in solution. Depends
how Access "savvy" your users are and whether or not they'd be inclined to
try to defeat your security.

Keith.
www.keithwilby.co.uk

[Tony Toews [MVP]]

"susan" <vd*@hotmail.comwrote:

>A user logs on to the application. When the password is checked in the table
Users I use the field user_id from that table to determine his rights in my
application. So I display only those records of a table WHERE RelationOf
LIKE user_id.

Rather than logging into the application I would use the network user id

API: Get Login name
http://www.mvps.org/access/api/api0008.htm

>Can I use this method safely? What if 3 or 4 users are using the application
simultanuesly? Can Access 2003 keep them apart or is it possible that
user_id 3 gets the data of say user_id 2 ?

Yes that works. However all your permissions are in the Access database somewhere.
Therefore someone could, for example, take the database home with them, open it up in
retail version of Access, figure out how it works and look at other peoples data.
Finally they could write their own little database that allows them to muck with
their permissions, bring it to the office and run it.

You must never assume that the users can't do this because they may very well know
someone who does. And if there's a reason for doing this, especially in dealing with
personal or financial data, then you have to use better security.

Tony
--
Tony Toews, Microsoft Access MVP
Please respond only in the newsgroups so that others can
read the entire thread of messages.
Microsoft Access Links, Hints, Tips & Accounting Systems at
http://www.granite.ab.ca/accsmstr.htm
Tony's Microsoft Access Blog - http://msmvps.com/blogs/access/

[susan]

"Tony Toews [MVP]" <tt****@telusplanet.netschreef in bericht
news:k0********************************@4ax.com...

"susan" <vd*@hotmail.comwrote:

>>A user logs on to the application. When the password is checked in the
table
Users I use the field user_id from that table to determine his rights in
my
application. So I display only those records of a table WHERE RelationOf
LIKE user_id.

Rather than logging into the application I would use the network user id

API: Get Login name
http://www.mvps.org/access/api/api0008.htm

>>Can I use this method safely? What if 3 or 4 users are using the
application
simultanuesly? Can Access 2003 keep them apart or is it possible that
user_id 3 gets the data of say user_id 2 ?

Yes that works. However all your permissions are in the Access database
somewhere.
Therefore someone could, for example, take the database home with them,
open it up in
retail version of Access, figure out how it works and look at other
peoples data.
Finally they could write their own little database that allows them to
muck with
their permissions, bring it to the office and run it.

You must never assume that the users can't do this because they may very
well know
someone who does. And if there's a reason for doing this, especially in
dealing with
personal or financial data, then you have to use better security.

Tony
--
Tony Toews, Microsoft Access MVP
Please respond only in the newsgroups so that others can
read the entire thread of messages.
Microsoft Access Links, Hints, Tips & Accounting Systems at
http://www.granite.ab.ca/accsmstr.htm
Tony's Microsoft Access Blog - http://msmvps.com/blogs/access/

Thanks Tony,

I am aware of the copying problem. I have to deliver a database where the
owner (super-user) must have the possibility to add, modify and remove
users. Thereby I don't want him (superuser) to view my code, so I deliver my
application as a .MDE. I don't see another possibility to realize this
login-thing (including user-management) in a MDE-file.

Susan

[Keith Wilby]

"susan" <vd*@hotmail.comwrote in message
news:77***************************@cache6.tilbu1.n b.home.nl...

>

I deliver my application as a .MDE. I don't see another possibility to
realize this login-thing (including user-management) in a MDE-file.

Susan

The built-in user-level security can be applied to an mdb which can then be
converted to an mde.

Keith.
www.keithwilby.co.uk

[susan]

"Keith Wilby" <he**@there.comschreef in bericht
news:49**********@glkas0286.greenlnk.net...

"susan" <vd*@hotmail.comwrote in message
news:77***************************@cache6.tilbu1.n b.home.nl...

>>

I deliver my application as a .MDE. I don't see another possibility to
realize this login-thing (including user-management) in a MDE-file.

Susan

The built-in user-level security can be applied to an mdb which can then
be converted to an mde.

Keith.
www.keithwilby.co.uk

Does this mean that if you login on the application with the and you have
theproper rights you can add, modify, remove users and change their
passwords? If so, can I put a commandbutton on a form and what action should
it perform?

Susan

[Keith Wilby]

"susan" <vd*@hotmail.comwrote in message
news:ee***************************@cache6.tilbu1.n b.home.nl...

>
Does this mean that if you login on the application with the and you have
theproper rights you can add, modify, remove users and change their
passwords? If so, can I put a commandbutton on a form and what action
should it perform?

I would suggest that you, as the developer, have the sole rights to
administer user groups and their permissions. This you would do on your
development copy whilst joined to your custom workgroup. If you're
considering the user-level security option then I would urge you to read the
FAQ from MS, there's a link to it on my web site.

Keith.
www.keithwilby.co.uk

[Salad]

Keith Wilby wrote:

"susan" <vd*@hotmail.comwrote in message
news:ee***************************@cache6.tilbu1.n b.home.nl...

>>
Does this mean that if you login on the application with the and you
have theproper rights you can add, modify, remove users and change
their passwords? If so, can I put a commandbutton on a form and what
action should it perform?

I would suggest that you, as the developer, have the sole rights to
administer user groups and their permissions. This you would do on your
development copy whilst joined to your custom workgroup. If you're
considering the user-level security option then I would urge you to read
the FAQ from MS, there's a link to it on my web site.

I disagree somewhat. There have been stories in the past of the
"developer that left and is nowhere to be found" basically locking out
the users from changing permissions. I think there should be some mgr
or owner of the company that is given rights to administer permissions.

Keith.
www.keithwilby.co.uk

[Keith Wilby]

"Salad" <oi*@vinegar.comwrote in message
news:fY******************************@earthlink.co m...

Keith Wilby wrote:

>>
I would suggest that you, as the developer, have the sole rights to
administer user groups and their permissions. This you would do on your
development copy whilst joined to your custom workgroup. If you're
considering the user-level security option then I would urge you to read
the FAQ from MS, there's a link to it on my web site.

I disagree somewhat. There have been stories in the past of the
"developer that left and is nowhere to be found" basically locking out the
users from changing permissions. I think there should be some mgr or
owner of the company that is given rights to administer permissions.

Yes, the "sole rights" comment was a little restrictive, what I was trying
to steer away from was the command button option, but I suppose even that is
a personal preference.