Re: Access 2002 Help required please......

From: Joan Wild (jwild_at_nospamtyenet.com)
Date: 11/07/04 

Date: Sun, 7 Nov 2004 11:57:30 -0500

Simonglencross wrote:
> Joan,
>
> Whats a RWOP query? you've lost me a little here.

Sorry Simon, that means 'run with owner permissions'. If you implement
security, you can change the 'run permissions' property of the query in
design view to 'Owner'. Doing so means that you can deny users all
permissions on the underlying tables, and give them permission on the query
instead. When they run the query, they are 'running it with the query
owner's permissions', meaning that they will have the permissions on the
tables that the owner has.

However, they are still restricted by the permissions they have on the
query.

For example, the query owner may have read/update/insert permission on the
table (not delete). They create a RWOP query based on this table, and give
users permission to read data on the query (note not update or insert or
delete). Users do not have permission on the underlying table. When they
run the query, they can read the data in the table (because they are running
the query as though the owner is, and the owner has read/update/insert
permission on the table). They are not able to update/insert/delete data in
the table, because they are still restricted based on the permission they
have on the query. Make sense?

Note that if the query owner gave delete permission on the RWOP query, users
still couldn't delete data, because the query owner doesn't have delete
permission on the table.

You can get more information on RWOP in the security FAQ and whitepaper.
Security FAQ
 http://support.microsoft.com/?id=207793

Security Whitepaper
 http://support.microsoft.com/?id=148555 

-- 
Joan Wild
Microsoft Access MVP

Relevant Pages

  • Re: Access 2002 Help required please......
    ... > Whats a RWOP query? ... that means 'run with owner permissions'. ... the query owner may have read/update/insert permission on the ... You can get more information on RWOP in the security FAQ and whitepaper. ...
    (microsoft.public.access.security)
  • Re: Object permissions
    ... you grant modify permission on the qryAttendanceActual query. ... trying to change the owner to a group or an individual, ... the query, they can actually open the query once the sql is set. ...
    (microsoft.public.access.security)
  • Re: Object permissions
    ... objQDF.SQL= strSQLAttendance with the error about not having necessary ... implicit 'read and modify' permissions on the query. ... If I set up a new query with this user or their group as the owner, ... Especially when this code should work with only the modify permission ...
    (microsoft.public.access.security)
  • Re: Object permissions
    ... only the owner can set the RWOP property on a query. ... Once I removed that line from the sql, ... you grant modify permission on the qryAttendanceActual query. ...
    (microsoft.public.access.security)
  • Re: Disable control
    ... Joan Wild ... Microsoft Access MVP ... Does it actually say 'query' or does it say the name of some query? ... need to give as a minimum 'Read Data' permission on that query. ...
    (microsoft.public.access.security)