Re: Password protect access DB?



Dude, you are obviously knowledgeable, and this is an excellent line of
reasoning. However, as I mentioned in my other posts I am not convinced
that Access with an encrypted password is any less secure than SQL server.
There are cracks even for SQL Server admin passwords.

Thanx,
--
Anil Gupte
www.keeninc.net
www.icinema.com

"jeff" <jhersey at allnorth dottt com> wrote in message
news:OFhvLPlYHHA.3272@xxxxxxxxxxxxxxxxxxxxxxx

What is the purpose of your security ... to protect sensitive data or
protect your data from being manipulated without the interface or prevent
third party software from accessing you data or to protect your investment
from being reversed engineered.

- if it is to protect sensitive data ... either you will need to abonded
Access or implement field level encryption for the sensitive data (ie have
the application encrypt data before storing it, and have it decrypt the
data when retrieveing it - a little extra but can be done very easily in a
base class - do this with MSSQL server application that handle patient
medical information).

- if it is to prevent manipulation of data ... simply warn the user that
any support agreement is null and void if the data is tampered with
directly in the database.

- if it is to prevent third party software from accessing you data ... I
would suggest going to MSSQL ... again, as previously mentioned, any IT
person (developer or not) should be able to crack an access password in
about 5 minutes ... this includes searching the web and installing the
necessary crack software. How ethical is this? Not very. Is it done?
...

- if it is to protect your property ... spend a little time to investigate
/ develop a solution that uses MSSQL server and forget about Access all
together.

Access has it place in the world of stand-alone applications (Sage -
SimplyAccounting); but when security is concerned, its place is on the
sideline!

Jeff




"Anil Gupte" <anil-list@xxxxxxxxxxx> wrote in message
news:eq%230pvkYHHA.3628@xxxxxxxxxxxxxxxxxxxxxxx
I have this problem too. I just want a basic level of security, but the
database has to be local because I am distributing this with my
application.

Thanx,
--
Anil Gupte
www.keeninc.net
www.icinema.com

"rowe_newsgroups" <rowe_email@xxxxxxxxx> wrote in message
news:1173441110.376947.52020@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
On Mar 9, 4:21 am, teeja...@xxxxxxxxx wrote:
Hi,

I am new to programming with databases and was wanting some help.

Is there any way to password protect an access database and access
sent sql commands to it via vb.net code?

Any help would be much appreciated.

Thanks in advanced.

Tom.

If security is your goal, Access is not the product you want to use.
All it's password protection schemes have been broken and the "hacks"
are posted all over the internet. I'm not saying Sql Server is
perfect, but if security is your goal you may want to download the
express edition and use it.

Also, I'm not sure I know what you mean by "access sent sql commands"?
Are you trying to encrypt the queries that you execute?

Thanks,

Seth Rowe







.



Relevant Pages

  • Re: SQL or Access DB
    ... As far as encryption goes though... ... with Sql Server you can use SQL DMO and encrypt your stored procedures ... installation - Security was absolutely critical and in most instances, ... > then we create a nice gui around this database and sell it to automotive ...
    (microsoft.public.dotnet.languages.vb)
  • [NEWS] Lotus Domino View ACL Bypass
    ... Lotus Domino View ACL Bypass ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... A Lotus Notes database contains documents that are organized into views. ... nor are they intended to protect the documents they ...
    (Securiteam)
  • Re: Cryptography in SQL Server 2000
    ... SQL Server 2000 Out-of-the-Box database security solution. ... database protection and privacy software is an industry-proven ...
    (microsoft.public.sqlserver.security)
  • Re: SQL or Access DB
    ... i am aware of the security modell of SQL server (we do use SQL server ... an end user,,, there is not reall alternative as a worgroup Access database ... MSDE and SQL express are all free ...
    (microsoft.public.dotnet.languages.vb)
  • Re: setting a password on a button on the switchboard
    ... Could you send me the sample database for the fourth option (4. ... > Security in an Access database can probably be broken down into two big ... > points about being easier than User Level Security, ... > What type of data are you trying to protect? ...
    (microsoft.public.access.forms)