Re: Security bug report?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



I open a login with the login name of somebody who is into the public group
only. This person has no specific access on database.
On the client Acces I see nothing: no table, no schema, only the view on test.

I can open, read and write data with the view. It is the same with a form
linked with this view.

I can open this view in design mode. Strange because I dont have this access
granded. If I try this from the form, I can not (access refused). If I try
this from the design manager of SQL (with public account), I can not access.

Already in access view design, If I want add a table, access is denied but I
can see all tables and definitions: just into the sql text I need put a
"cross join tablename" !!!

Is it normal?

--Luc

"Mary Chipman [MSFT]" wrote:

What you see on the client (Access) depends on how you have secured
the tables and views on the database. Access cannot override any
permissions that you have revoked or denied; If Access can see schema
elements that you don't want it to, then you have overlooked some
aspect of securing those objects on the server.

--Mary


.



Relevant Pages

  • Login password
    ... How can I create a login when opening a database? ... using this the user is still able to edit ... the design of the database. ...
    (microsoft.public.access.security)
  • Re: PDO: Switch database user without reopening connection
    ... At the bare minimum there will be a login user who only has ... modifications to the database as well (editors get update permission, ... As database connections are expensive to ... a certain visitor in the Session, and use that value to start the right ...
    (comp.lang.php)
  • Re: PDO: Switch database user without reopening connection
    ... At the bare minimum there will be a login user who only has ... the postgres user they are logged in as to one that can make ... modifications to the database as well (editors get update permission, ... As database connections are expensive to ...
    (comp.lang.php)
  • RE: How to allow users to change their password?
    ... be set up to provide the Security dialog window for password changes. ... I'll have to login using their login ... > name/password first. ... See http://www.QBuilt.com for all your database needs. ...
    (microsoft.public.access.security)
  • Re: Please! Doesnt anyone know a better way to do this?
    ... account, they need to automatically be directed to the page to enter data ... session variable on the Account page. ... I assume here that you're checking a database when the user attempts to ... When a new user attempts to login or clicks to register, ...
    (microsoft.public.dotnet.framework.aspnet)