Form secutity

[Gismo]

Hi all,

Hope you can help me and hope this is the right section for this query.
I have a rather complex data base, in the sense that I have about 20 different forms, most are duplicates of the other. lets say you can not compare apples to pears to peaches, hence the duplication. I can not utilize one form for all function. then I have a table with user names, passwords, and tick box to each function the user has, which is just as complex as some users might have access to a specific form but not to certain records in that form. I doubt that a vdb code will will for granting access. I was thinking to build in each form record source a link to the user table and only allow selected tick box users to have access. Any other suggestions? will take me a while to rebuild each form.

 

[Ranman256]

you could have a subtable tUserFrms to the master tUser table.
tUserFrms would hold the list of forms a person can enter.
UserID, Form
1, frmChecks
1, frmReceipts
2, frmChecks

user could choose a form from a combo box,
the combo box is filled from the tUserForms
user picks the form, clicks open button

instead of showing the ugly form names, frmChecks, frmReceipts, etc,
have a master form list with a 'caption'
Checks, frmChecks
Receipts, frmReceipts

then the user would see only the caption,
but the combo would be bound to the 2nd field and open that....

docmd.openform cboFrm

 

[jdraw]

You might get some ideas from this youtube video by Steve Bishop on Managing User Access.

 

[Pat Hartman]

I see that you don't need just login security. Too bad. Remember NOTHING you do will actually matter so don't spend a lot of time on this. It falls in the same category as gun control. Honest citizens obey the laws. Criminals ignore them. In this case, your honest users would not steal the data even if the app were unsecured but criminals will simply take a copy of the database, crack it and sell it.

Defining security specifically by individuals is the road to perdition. You need to create groups and create security for a group and then assign individuals to a group. This can be complex or simple. Take a look at buying the LASSIE product from Peter's Software.
http://www.peterssoftware.com/las.htm

 

[bastanu]

Hi Gismo,

Please feel free to use my free utility (http://forestbyte.com/ms-access-utilities/fba-custom-access-levels/) that allows you to set very fine granular control (at the control level) for any form in your database. You would import the objects in your db and customize it according to your needs. I found that if you combine that with some pretty common sense security tweaks (hiding navigation pane, custom ribbons, deny SHift+F2, etc.) you can get a fairly secure application.

Cheers,
Vlad

 

[Galaxiom]

I have a rather complex data base, in the sense that I have about 20 different forms, most are duplicates of the other. lets say you can not compare apples to pears to peaches, hence the duplication.

That depends if the data structure is designed to support fruit rather than targeting apples and pears.

To add oranges to the system a well designed structure allows oranges to be added as a record to an existing table and the special attributes of oranges not applicable to other fruits added as records to another existing table.

If oranges requires a new table and another form then the data structure is probably inappropriate.