Re: limiting table access and RWOP queries

Tech-Archive recommends: Speed Up your PC by fixing your registry



> A query that is created through VBA code, does run with the
> permissions of the user who created it, and in that sense, it is
> /always/ an owner permission query: it can not /not/ be one!
>
That's a bit out-of-context IMHO TC, your description is correct though
burbled (from too long underwater? <g>).

An RWOP query, in any sensible security meaning, means the owner of the
database. And that can't be created on-the-fly with VBA code, the "owner"
becomes the user in that case, which is useless and as you state.

The best I could achieve (assuming stored RWOP queries are themselves
insecure), is that RWOP SQL statement can be written, by the owner of the form
at design-time, direct into the recordsource. That can only be recovered if
they use the kindness of Jeff Conrad and Tony Toews to recover them. (I'm
learning)

Also: whereas I think there are not much design secrets in a table, there may
well be clever stuff in a query. Mine are so weird that not even I know how
they work. Seriously, I can see a good reason to hide queries, as against
tables, (or data but that depends on the reason). OTOH complex queries can be
assembled in VBA to rely on simpler RWOP queries, but then they would be
stored RWOP queries which don't seem very secure to me.

Chris
PS I don't disagree with much of what TC says, just how. I cannot speak as to
my own tongue-tied-ness. Clear as mud, as they say!


.



Relevant Pages

  • Re: How do i count and store "selected" check boxes in a query?
    ... it takes me to the VBA code and highlisted my new line of code. ... the "IsGroup" check and so when i print label for the orders; ... To use an insert query, you will have to use VBA code (as a procedure ...
    (microsoft.public.access.queries)
  • query returning oldest record only
    ... This is the query as run in Access which returns bad results. ... I also get proper results when I use ADO. ... Working continous form VBA code. ...
    (microsoft.public.access.queries)
  • Re: Concatenating the same field from multiple records
    ... It's better to use the Execute method of CurrentDb for executing queries ... Dim dbs As DAO.Database ... if i was to take the SQL for the append query and use it in VBA code, ... it be better to execute the query, or can i use docmd.sql " my sql here" ...
    (microsoft.public.access.queries)
  • Re: CrossTab Query with Parameter
    ... - The parameters are not recognised as parameter, because in xTab1 I do not ... In the cross-tab report, the parameter is not filled properly in the ... 'underlying query'. ... using VBA Code if need be, but please try to provide me with as much ...
    (comp.databases.ms-access)
  • Re: RWOP queries for back-end secuirty: easy/hard? slow/fast?
    ... raw data directly from the back-end database. ... using RWOP queries in the front end, helps to close this hole somewhat, ... other methods of querying data beyond a straightforward Access query. ... Then you can give the Manager group permissions to rwopPayManager and everyone permission to rwopPayEmployee. ...
    (comp.databases.ms-access)