How to prevent from deleting the mdb

[Newman]

Hi!
I made an Access database for one of my customers. And I implanted the Groups/users security.
But, someone managed to delete the database itself from the server.
I called the server administrators and they said that when you give rights to write the ldb file you also give the rights to delete the mdb file.
I am not sure about that and want someone else's advices.
Is it possible to protect my database from being deleted?
Also, is it possible to track down the person who deleted it?
To the customer's eyes, I am responsible for the database and I have to prevent this.
But I don't know how!
And I have no special rights on the server itself. (My knowledge in networks isn't high anyway.)
All I know is that they have Novell, with Windows2K and AccessXP.
So, any advice for me???
Thank you!

 

[Len Boorman]

Not a network expert but here on a Novell network there is a location where only Network Administrators have delete authority.
Sounds to me that your client is attempting to duck the issue. His network is his responsibility and that includes the security of all applications/data on the network.

Len B

Additional thoughts.

Where was their backup. Surely they have backup of their network,
You have no authority on their network naturally.
If you delete Access from your own PC is that Microsaft's fault. Of course not

The more I think about it the more it seems that are trying to cover their own internal shortcomings.

 

[Newman]

For the backups, there is no problem there. Adding to the regular backups of the server, I made a script used by the task manager to do backups of the mdb files (BE&FE) every night. One backup on the server and one on my local HD.

The problem is that I don't want to go put the backup each and every day. Done it twice already. It is not a long procedure, but it gets on my nerves and I'm scared thinking of what that guy will do next.

If he thinks about it (Not sure he can think though) he could delete the file just before leaving at night instead of when he gets in, in the moring. That way, he could destroy a full day of modifications.

My client knows nothing in computers. Since it is my first work for them, they believe that it is my mistake. It is hard to received trust from a new customer.

Thank you for your advice. I'll keep looking at it...

 

[IgorB]

Network guys should set up 1 group of users with the same rights(read,write) .It is enough in order to prevent users for deletion and share db file between users.
But you as a creator/developer can have different rights included "erase"(allow to delete db file) and not being in this group.

 

[Autoeng]

All users of a shared db must have delete rights in the directory as the last person out of the db causes the deletion of the .ldb file.

 

[Newman]

All users of a shared db must have delete rights in the directory as the last person out of the db causes the deletion of the .ldb file.

So there is no way to prevent the delete of the mdb?
What else could be done?
Why use security, if anyone can delete the database?

 

[Autoeng]

I make the db hidden in the directory which can be gotten around by selecting Show Hidden Files And Folders under Folder Options -File Types.

Access security is not meant to protect the mdb file itself but instead the data, forms, reports, queries ect. that reside within it.

I'm not IT but I wonder if it is possible to create a hidden folder that cannot be viewed no matter what folder options are selected in Win2K. Win2K lets you do some nifty security stuff so it might be possible.

 

[Newman]

I make the db hidden in the directory.

That's a good idea. Thank you!

It doesn't prevent from deleting the db, but it prevents from accidental deletes, and prevents from a non-experimented user to do harm.

Also, if the db gets deleted again, I'll know for sure that there is someone doing this with bad intentions.

As far as I know, that is the best that can be done.
My customers call someone else to get a second opinion and received the same answer that I gave him. So, now, he believes me.

I am still available for other possibilities, but I will stop the search. I have other customers to work with.

Thank you Autoeng!
Thanks to Igor & Len too.