Database Security

[shamas21]

Hi All

I was wondering if you guys can advise me or help me with this big problem I have which I cant get my head around and could cause huge problems for me.

I have created a Access 2007 database for the Sales team at the company I am working for. The Sales team sell products and receive commission for every product they sell.

All the products they sell including the price are stored in my Access Tables for which the commission payout at the end of the month is based on the data in the Access tables.

My security concern is that an employee who know a little about Access Databases could bypass my login screen which is a form that I have created that asks for a Username and Password by:

1) Holding down the shift key and presents them with all the tables for which they can add sales they haven’t really made into the table (they then would get commission of sales they haven’t really made)
2) Failing that they could simply create a new database and link into my Tables and change the data

Is there anyway I could allow them to use the database to enter the information into my tables (through my Forms) without allowing them to see the backend tables for which they could modify the data in my Tables to their advantage as stated in Point 1 & Point 2?

Thanks

 

[dbDamo]

Have a look at this thread - http://www.access-programmers.co.uk/forums/showthread.php?t=36043&highlight=bypass+screen

 

[MStef]

For Point 1).
Look at "Demo1A2002.mdb", (attachment, zip). Open Form and try.
There are no possibility to enter via SHIFT key. (It is for user only).
Try to adapt it on your FE.
For Point 2).
I suppose you made a SPLITING on your MDB, (You have made a FE and BE).
1) For any case take a copy of your FE and BE.
2) Put the password on BE.
3) Now, you can not to work with this BE via FE.
4) To remove this, do RELINK yor tables (in FE), on the same BE.
It asks you for password. Enter password and go on.
5) Now you can work with this BE via FE.