User has group permissions to object, but still denied access.
- From: Project Orca <ProjectOrca@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Thu, 12 Jun 2008 14:52:33 -0700
The user is attempting to change some queries on a database stored on a
server and accessed by a mapped drive, but gets the following error message
when trying to save the changes: "You do not have the necessary permissions
to use the '<query>' object. Have your administrator or the person who
created this object establish the appropriate permissions for you." (replace
the <query> with the name of the query currently being edited). There are
about 80 queries in the database, and I haven't been able to find a pattern
for which queries she is able to edit and which ones she is not.
If she copies or moves the database to her local machine, she's able to make
changes to any of the queries.
Regarding the security, the database was converted from an Access 97
database with no security to an Access 2000 (when connected to a workgroup
file - database.mdw as user "sysadm" ) and then to Access 2003 format (again
with the database.mdw and user "sysadm"). At that point, all of the objects
in the database had an owner of "sysadm".
Then the security permissions were set on the database. The Users group was
only given permission. Another group was created for basic read/write
(GroupRW). The Admins group was given full permissions. The Admin user was
removed from the Admins group. Sysadm was already in the Admins group, the
GroupRW and Users group. User1 had the same groups (Admins, GroupRW, and
Users).
The user has full control of the folder on the server where the database is
stored, as well as propagating that full control to the database files (mdb,
ldb, and mdw).
The way I understand the security as it is set up, even though the
individual users don't have permissions to database objects, they should
still get the permissions that were assigned to their group - in this case
full permissions for User1 since she is part of the Admins group and the
Admins group has full permissions to all database objects.
Can anyone see a reason why she wouldn't be allowed to edit a query? Can
anyone see a reason why she can edit some queries but not others (when they
all have the same security structure)?
I don't want to muddy the waters but it may be important to note that there
35 forms, 45 reports, and 2 macros. She's unable to gain exclusive access to
change reports and forms when the database is located on the server - even if
she's the only one in the database at the time and the server reports no
other users with the database open. This is another issue that I need to
resolve, but I'm trying to tackle one area at a time...
.
- Follow-Ups:
- Re: User has group permissions to object, but still denied access.
- From: Chris O'C via AccessMonster.com
- Re: User has group permissions to object, but still denied access.
- Prev by Date: Re: Opening database Exclusively
- Next by Date: Re: How to know if the user is READ only?
- Previous by thread: Re: Opening database Exclusively
- Next by thread: Re: User has group permissions to object, but still denied access.
- Index(es):
Relevant Pages
|
