How to Protect your Back End?

[Dan2kx]

Good aft peeps,

im investigating the FE/BE access route just as a time filler really (dont get out much - LOL) just wondered how people protect their BE databases?

Dan Out

[ChipR]

First, I hid the navigation window. Didn't feel too secure.
Then, I put in code that checks the windows login name and closes the db if it's not me. I like that better.
Finally, I renamed the backend from .accdb to .accdr. Now if anyone opens it and it doesn't close, they see the runtime menu and all they can do from the menu is close Access. I honestly don't think any of the users would imagine changing the file extension.

[Dan2kx]

@ChipR
mine uses .mdb extension i believe?

[ChipR]

Ah, I'm using the 2007 format, so .accdr files automatically use the Runtime environment even though my users all have the full version of Access. I don't know whether this was an option before the 2007 version.

[Dan2kx]

not sure, i have an alternative of my own, using the Command line switch /cmd and setting a value so that if there is no value it closes, ie you need to know the right answer, but it still leaves the back end to "foreign" update queries, if you know what i mean....

Dan

[ChipR]

Yeah I hadn't though about that. How can you prevent another front end from linking to and updating your tables if they know the structure?

[Dan2kx]

or that yeah, the ideal would be to use a database password, but you cant code that in AFAIK... or can you?

[DonRayner]

If you are using the access user level security on the frontend you can bring the backend into the same workgroup with the frontend. That way you can set whatever permissions on the tables that you want.

Lately I've taken to outputing my frontend as an mde and using sql express as my backend. That way I can use the windows login ID to set access levels to the db.

[Dan2kx]

@DonRayner
im not using this because i couldnt be bothered and it wouldnt fit in with my custom "ness"

@DonRayner
this gives me an ingenious idea... the BE will be located in a domain server so i can set the permissions to deny access to all but me, im sure that would work... ill have to try it tomorrow

any other ideas very welcome.

Dan