Re: Security bug report?
- From: Belu33fr <Belu33fr@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 16 Mar 2009 02:42:03 -0700
I open a login with the login name of somebody who is into the public group
only. This person has no specific access on database.
On the client Acces I see nothing: no table, no schema, only the view on test.
I can open, read and write data with the view. It is the same with a form
linked with this view.
I can open this view in design mode. Strange because I dont have this access
granded. If I try this from the form, I can not (access refused). If I try
this from the design manager of SQL (with public account), I can not access.
Already in access view design, If I want add a table, access is denied but I
can see all tables and definitions: just into the sql text I need put a
"cross join tablename" !!!
Is it normal?
--Luc
"Mary Chipman [MSFT]" wrote:
What you see on the client (Access) depends on how you have secured.
the tables and views on the database. Access cannot override any
permissions that you have revoked or denied; If Access can see schema
elements that you don't want it to, then you have overlooked some
aspect of securing those objects on the server.
--Mary
- Follow-Ups:
- Re: Security bug report?
- From: Mary Chipman [MSFT]
- Re: Security bug report?
- References:
- Security bug report?
- From: Belu33fr
- Re: Security bug report?
- From: Mary Chipman [MSFT]
- Re: Security bug report?
- From: Belu33fr
- Re: Security bug report?
- From: Mary Chipman [MSFT]
- Security bug report?
- Prev by Date: Strange error
- Next by Date: RE: Strange behavior
- Previous by thread: Re: Security bug report?
- Next by thread: Re: Security bug report?
- Index(es):
Relevant Pages
|