Auto log users in w/ AD credentials?

[ittechguy]

I'm trying to make it so that users are automatically logged in w/ their credentials from Active Directory. I already have an audit log which tracks the username of the person making changes. I want to do basically the same thing for db logon.

The main purpose for doing this (besides the fact that my boss said he wants it to have some kind of logon form) is to control who can edit the db, and now. I want to allow all my co-workers to edit records, but only a select few to delete or add new records. Although the equipment inventory form is built so that a record can never be deleted, only its status changed.I realize a logon form is not very secure as it is easily bypassed. However I mostly want to ensure that the database doesn't get corrupted from people who are not authorized (and/or don't know what they are doing). As I said, I do have an audit log so I mostly need to make it harder for them to do what they shouldn't do.

So, I have two problems. First I need to create a logon form which will log users into the db using their active directory username. Then, based on that username, I need to prevent certain users from pressing certain buttons which will ultimately prevent the user from adding or deleting records.

If someone could please point me in the right direction, I'd appreciate it.

[NeoPa]

You're making it far too hard for yourself.

The user's already logged in, so doing it again in your database is both unnecessary and pointless. All you need is to determine which account is currently logged on. See Function to Return UserName (NT Login) of Current User for help with that.

Once you have that information you can simply check the value in the code when determining which accounts get to do what stuff. Sometimes you can disable (or hide) buttons before they're clicked. At others check the account after it's clicked and take the appropriate action.

[ittechguy]

Thanks for the help! That does make it a lot easier.

I've added that function. Now I assume I need to call it from another control on the form. For test purposes, I've created a button and tried to call it in the OnClick property by typing Call GetUserName(). It is not working, I believe I am not including the correct arguments.

For now, if I could just get a msgBox that displays my username, that would be a good start.

[ittechguy]

I figured it out! I needed to call sys_OrigUserID and not GetUserName.

Thanks again for your help.

[NeoPa]

You're quite right. GetUserName() is what is used within sys_OrigUserID() and is an OS function, so not designed for use with VB or VBA except without some fiddling, as you'll see when you look at the code in sys_OrigUserID() which handles all that for you.