Re: security not going across the network

From: Rick Brandt (rickbrandt2_at_hotmail.com)
Date: 05/10/04


Date: Mon, 10 May 2004 09:45:47 -0500


"dennis" <dennis@protocase.com> wrote in message
news:acd901c43692$18e2ac10$a001280a@phx.gbl...
> I have just setup security (groups and users) on a
> database that is running across a network. When using my
> PC, the one the database security was setup on, it works
> fine (asks for username and password). When accessing the
> database from another computer, it doesn't ask for a
> username and password, it just opens as it normally did.
> The database is situated on a designated file server. Do
> I have to go to every individual PC and setup the security
> on them?

No, it means you have not set up security properly. When secured properly,
anyone who needs to use the file would have to use the MDW file you created
when you applied security. Anyone attempting to open the file with a
different MDW file should be denied access.

The other users are likely still opening the file with their default
System.MDW file. Regardless of which MDW file they are using, if they are
not being prompted for a UserName and Password, then they are being
silently logged in as user "Admin" as a member of the default group
"Users". Your security settings should have removed all permissions from
both of these. The fact that they can open the file indicates that you did
not.

Also check the ownership of the database and all objects. Owners have
rights above and beyond the permissions explicitly granted to them. A
common mistake when securing a file is to leave "Admin" as the owner of the
database. As such he will be able to open the file even though you have
removed all permissions.

-- 
I don't check the Email account attached
to this message.     Send instead to...
RBrandt    at       Hunter      dot      com


Relevant Pages

  • [NEWS] Lawson Financials RDBMS Insecurity
    ... Beyond Security would like to welcome Tiscali World Online ... the database itself) to easily compromise the Lawson Financials' database. ... Setup #1 tends to be the preferred configuration method by Lawson ...
    (Securiteam)
  • Re: apply a Switchboard security
    ... > Security I would recommend ALL of the following reading material. ... >> The users of this Access database are generally low tech users. ... >>> This assumes that the Admin Switchboard area you want to ... >>> opens up a Switchboard, ...
    (microsoft.public.access.formscoding)
  • Re: setting a password on a button on the switchboard
    ... Could you send me the sample database for the fourth option (4. ... > Security in an Access database can probably be broken down into two big ... > points about being easier than User Level Security, ... > What type of data are you trying to protect? ...
    (microsoft.public.access.forms)
  • Re: access 2003
    ... security in access 2003. ... The data will go on the server and the program database ... than the alternative of creating an mde file. ... MDW file from the written record. ...
    (microsoft.public.access.conversion)
  • RE: system.mdw netowrk issue
    ... Correct me if I'm wrong but it sounds like the database and/or the MDW ... Level Security). ... Microsoft Access Support ... | database opens and uses this system file. ...
    (microsoft.public.access.security)