Re: Security without passwords

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Your users simply open the mdb file. They'll be doing so using their default
system.mdw workgroup.

They'll be 'silently' logged in as 'admin' and therefore have the
permissions you gave the Users Group.

You can verify the permissions the Users Group has by opening the mdb using
your secure mdw and going to Tools, Security, Permissions - choose Groups
and select the Users Group.

That group should have Open permission on the database object, and at least
read data permissions on the tables/queries, and Open permission on the
forms and reports.

When you want to make changes, you'll use your secure mdw workgroup and
login as Graeme Leach and make changes. Then just provide the updated mdb
file to the users.


--
Joan Wild
Microsoft Access MVP

Graeme at Raptup wrote:
Joan,
thanks for bearing with me.
I've followed the step by step from step 16.
As far as I can tell the permissions I set are for read only (step
24). So how do normal users access the file? Assuming that the file
sits on a network drive and that users each have a desktop shortcut.

Below find my Users (I've changed the passwords)

Name: Graeme Leach
Personal ID: apPvY5XHFetc
Password: fishie
Groups:
Admins
Name: admin
Personal ID: <Previously Created>
Password: LAIZiwhetc
Groups:
Users


"Joan Wild" wrote:

The wizard generated shortcut is fine. If you want to right-click
it and choose properties, you'll see the target line and what's in
it (just fyi).

You are following the step-by-step which is for a typically secured
mdb (where no permissions are given to the Users Group). But you do
want to give permissions to the Users Group, in order to distribute
the mdb and not require them to log in.

In your case, you want to assign permissions only to the Users
Group, and not create any other groups, or use any others. You will
be a member of the Admins group and have all control, while your
users will just use their default system.mdw workgroup file (and be
silently logged in as 'Admin' user which is a member of the Users
Group).


--
Joan Wild
Microsoft Access MVP

Graeme at Raptup wrote:
Ok,
looks like I got the wizard to secure (rather than manually).
When clicking the wizard generated shortcut I am asked for a
password to login as 'Graeme'. I did not create the desktop
shortcut with the target "path to msaccess.exe" (as I do not
understand that! Is it supposed to be c: ....system.mdw ?)
Lastly, the following seems incongruous with the 2nd last paragraph
on the link (..Do not create new groups or assign permissions to the
group offered by the wizard.)Thanks Joan,
I've gone through your step by step security set-up.
As I want users access the database without a login, and am
using Access 2002, I enter 'No' at step 24.

Well you should choose Yes. You do want to assign permissions to
the Users Group. That way, they'll be able to use their standard
system.mdw and no login will be required.



"Joan Wild" wrote:

You can always secure it manually. There's nothing the wizard
does, that you can't do yourself. The instructions are on the
97/2000 page.

--
Joan Wild
Microsoft Access MVP

Graeme at Raptup wrote:
Ok,
got that.
When I 'finish' (step 29) I don't get any report.
It seems that Access is trying to process, it says 'securing
objects' at the bottom of the screen but then nothing happens.
Thought I'd leave it for a few minutes but it appears to get
stuck. Now I'm stuck!
Cheers,
graeme

"Joan Wild" wrote:



--
Joan Wild
Microsoft Access MVP

Graeme at Raptup wrote:
Thanks Joan,
I've gone through your step by step security set-up.
As I want users access the database without a login, and am
using Access 2002, I enter 'No' at step 24.

Well you should choose Yes. You do want to assign permissions to
the Users Group. That way, they'll be able to use their standard
system.mdw and no login will be required.

You just don't want to assign permissions to any of the other
groups the wizard offers, nor do you want to create any new
groups.

At step 25 I have me (Graeme) as one user and there is a prompt
"Add new user". Do I add a new user or click next at this stage?
(At step 25 your last line reads "It is recommended that you
select this user and enter a password... - who is 'this' user? A
newly created user I presume)

You don't need to create any users, since you want your users to
just be silently logged in as 'Admin' using their system.mdw
workgroup file. The password is the password for the Graeme
user, yes.

I presume there should be a second security group - if so can I
set up optional groups so that this (user) group are 'new data
users'? Do I still create passwords for other users even though
there is no login?

No need to setup any additional groups or users.

You'll have a secure mdw with Graeme user in it, and this user
will be a member of the Admins Group and own everything. When
you want to make changes you'll use the secure mdw and login as
Graeme.

Since you've assigned permissions to the Users Group, all you
need to distribute is the mdb file. Users will use their default
system.mdw workgroup. The Users Group is common to all mdw files
(but the Admins Group is not). So your users will get the
permissions that you assigned to the Users Group.

--
Joan Wild
Microsoft Access MVP


.

Relevant Pages

  • Re: Security without passwords
    ... (where no permissions are given to the Users Group). ... Microsoft Access MVP ... Graeme at Raptup wrote: ... As I want users access the database without a login, ...
    (microsoft.public.access.security)
  • Re: More security questions
    ... have permissions to do anything. ... Usernames/passwords/group membership are stored in the mdw. ... Microsoft Access MVP ... who also had admin rights when I created the secured database. ...
    (microsoft.public.access.security)
  • Re: More security questions
    ... You shouldn't be logging in as Admin, ... have permissions to do anything. ... Usernames/passwords/group membership are stored in the mdw. ... Microsoft Access MVP ...
    (microsoft.public.access.security)
  • Re: Admin Privileges
    ... Just grant them open ... Microsoft Access MVP ... user permissions for the DB and tables/queries. ... Admin instead of the current logged in user. ...
    (microsoft.public.access.security)
  • Re: Security without passwords
    ... Microsoft Access MVP ... As I want users access the database without a login, ... You do want to assign permissions to the Users ... password is the password for the Graeme user, ...
    (microsoft.public.access.security)