2003 Security - Front End vs. Backend...

[Arpeggione]

Hi: I can secure my application on the front end according to UserGroup - who gets what, etc - with vba. However, unless I secure the backend, people can go into the directory (if they're inclined) and open the tables directly...

But...if I lock down the tables directly for some groups - those people won't be able to access data from the front end either, correct?

So...how do I lock down the back end tables - so someone can't just go in and open them up directly? I suppose I could have a dashboard on the back end that automatically opens (unless you hold down the shift key). The average user probably then wouldn't be able to get in.

anybody have any thoughts? thank you!

Karen

 

[SpentGeezer]

I use a different password on my front end (.mde) and my backend (.mdb) files. I am the only one with a password to the backend.

 

[Dairy Farmer]

Password protect the BE (BackEnd). That way nobody can open them without the password.

In the FE (FrontEnd) the tables are linked. Linked tables cannot have their structure altered. When tables are linked, a password is required becasue the BE is password protected. This is only needed when you initially link the table.

The FE has total access to the data in linked tables (Read, Write, Edit, Delete). Forms, Queries, Macros and VBA will be able to manupulate the data in the tables. This is where you put in your restrictions.

One option that is used is to create more than one FE. An example is: FE1 may only be able to enter new data. This is done via the code in the Forms. ie. me.allowadditions = true, me.allowdeletions = false, me.allowedits = false. Or you could just not include some Forms. i.e FE1 does not include the Form_CompanyProfits.

This can be further customised by department. Engeneering only has certain tables linked and certain forms. Finance will, on the other hand, has access to other forms and tables.

You could also code the forms to only open if the user/comuter belongs to a certain domain group.

Lastly, and most importantly, protect your FE by making it a .mde or .accde. Then require the the app to run with Runtimes. The users do not have to have Access installed to run the app. A further advantage of Runtime (other than being comletely free) is that it has no editing options. So the user can hold down the F11 key all day and nothing happens.