Re: Does FE mde need security?

From: Jeff Conrad (jeffc_at_ernstbrothers.com)
Date: 11/10/04


Date: Wed, 10 Nov 2004 13:43:46 -0800


"Fred Boer" <Fredboer1@NOyahooSPAM.com> wrote:

> I'm beat for today.. :(

Patience Fred, patience!

> Well, I thought, hey, why not just *try* applying security to the FE file.
> So I did. I went back to the original MDB, created a new version so that I
> was the owner, used the proper workgroup, altered the permissions, converted
> to 2002, compiled, removed the added "Web Components" reference (a set of
> references which always causes it to bomb as an MDE, but which Access
> stubbornly puts in ever time I convert from 2000 format to 2002 format), and
> created the "secured" FE MDE. The FE opened, asked for a login, and then
> left me staring at an empty Access main screen.

Fred, this might be a stupid question, but why not change your default Access format
to 2002 instead of having to covert them to 2002 from 2000? Are you needing to do additional
development in 2000 versions?

> After an hour or so of changing permissions, recreating the mde, fiddling
> and fussing, I realized that when I create a new .mde, Access resets the
> startup options to the defaults. Which means that all that was wrong was
> that I forgot to set the switchboard form to automatically startup...
> <groan>

Been there many, times Fred. Seriously.
Just smack your forehead and be done with it.

> Anyway, I've decided that I need to take a step back. I'm going to ignore
> the AutoFE Updater, and start from scratch with one secured FE file, and one
> secured BE file, and see how it works, but, I can't take any more today. I
> need some fresh air... or chocolate... or a stiff drink....

It will come eventually Fred, just stick with it.
After all, you are learning from your mistakes so this is just part of your learning process.

> 1. Is it necessary to apply security to the FE mde at all, given that it is an mde?

That answer completely depends on the situation at hand.
In some situations just properly securing the BE will do just fine.
If you need extra security from even opening certain forms/reports
than you may consider securing the FE.

> 2. When I load the FE mde, I get an Access login screen. This is the
> secured BE looking for a login? What happens if I secure the Front End -
> would I see two logins, one for FE, one for BE? Even as I write this
> question I feel that it is a silly question, but... :)

If you secure the BE and the FE using the same workgroup file then no,
you will not see two login screens.

> I should note that this is complicated by the fact that I use Tony Toews's
> AutoFE Updater- so I am kind of tackling two things at once...

I would not worry about this quite yet.
Do some more experimenting with security/permissions before heading
into that area.

-- 
Jeff Conrad
Access Junkie
Bend, Oregon


Relevant Pages

  • RE: application security
    ... Securing Authentication into the applications ... Securing Access control to resources in the application ... Netegrity plays a role in Authentication and Access control ... If you are trying to build the most secure application, ...
    (Security-Basics)
  • Re: Which Windows OS is Safest
    ... It's not specifically which is the safest OS, but how you go about securing ... These will help make any OS secure. ... >> I would like to know what is regarded as the safest Windows OS as I ...
    (Security-Basics)
  • Re: LOGIN INFO secure at wwww.americanexpress.CA?
    ... a session, and all was secure. ... the particular point of concern was securing the login info itself, ... My guess is that the quality of support at Amex is such that they never ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Looking for One Time Pad Software, small with gui for WIN.
    ... Yes - securing the computer is the key to preventing a side-channel ... attack it. ... So if your OTP is implemented using secure, ... But the OP was talking about a OTP on a Windows PC. ...
    (sci.crypt)
  • Re: Is .NET Passport credential traffic secure?
    ... my point is that you must FIRST establish a secure connection to ... user instead of making the login page itself secured with SSL so the ... The "Sign In" page at eBay submits the form data ... HTTPS site: Allowing the site to generate the HTML content in the page ...
    (microsoft.public.security)