Linked Tables Security

[G37Sam]

Hello,

I was wondering, where does MS Access store the backend passwords of my linked tables? I'm just wondering, if a user manages to gain access to the frontend's design, can he somehow go into certain settings or system tables and figure out the backend password? Just a security concern of mine.

I'd appreciate any help on this

Cheers,
Sam

 

[gemma-the-husky]

possibly in the connection string

try

msgbox currentdb.tabledefs("sometable").connect

and see if it is embedded in there somwhere.

 

[bparkinson]

Yep, it reveals the password.

But my database is in the cloud, so I can't use Windows authentication. In a production environment, this would be fine because we would all be following best practices and using mixed-mode authentication, with users authenticated by their domain login. So no password in the .Connect property.

This begs the question of what to do if your production database is in the cloud.

 

[G37Sam]

Oh man, it did show!

Aah well, I'd rather store it than worry about the users having to remember and enter an extra password I guess.