Question Securing the backend in a shared folder

[hellind]

Hello,

Introduction
As would be expected, most people have designed their Ms Access Application by splitting the database, forms, queries, reports in the Front-end, while the tables that holds the data are in the back-end.

The Frontend is distributed to users on their desktops, while the backend is accessible from a shared folder. The front-end access the back-end through linked-tables.

I have followed the security steps outlined in this website
http://www.pointafter.com/Archives/nl0201.htm. Users will find it 'harder' to open the backend.

Problem/Question
I would like to take Ms Access security a bit further. Can I remove network access rights to the backend for all users so that they cannot copy the backend mdb and take it home?

They can only use the frontend at their desktop, which in turn can only access the backend.

Something like how ASP works, grant network access of backend to single user "frontend". The frontend will have internal code to connect to shared backend using the lanid "frontend"

 

[Guus2005]

Reasons to be cheerfull pt.1

If your users can't access the database they can't access it through the FE.
So you can't prevent users from copying the database and you can't prevent them from viewing it's contents, but you can raise the bar for doing so.

Use Access' Security. This way they also need the MDW file.
In addition i use the following method:

My application must be started using a shortcut.

Shortcut containing:

start /max MSACCESS.EXE /cmd "FromShortcut" F:\EDB\EDBApp.mdb

In Access i use the macro

AutoExec macro: RunCode InitApp

And in the InitApp function it says

Public Function InitApp()
    If IsNull(Command) Or Command <> "FromShortcut" Then
       MsgBox "This database must be opened using the shortcut!", vbCritical, "EDB Database"
       DoCmd.Quit acQuitSaveNone
    End If
end function

Ofcourse you must prevent users from opening the database by holding the shift key.

HTH

 

[hellind]

Hi Guus2005,

I have used the Access Security MDW as outlined in http://www.pointafter.com/Archives/nl0201.htm.

But I wanted to prevent users from copying the backend.

I was hoping for some way to make the Frontend only access the Backend, for example, the FrontEnd will connect to the network share with a particular Network Username and not the user logged in username.

Something like web programming ASP.

 

[Guus2005]

Reasons to be cheerfull pt.2

You could hide the actual location of the BE as much as possible by not letting users see the database window and rightclicking the tables. And you have to prevent users from entering code, you could use an MDE frontend for that.

You could use encryption to obscure the data in the database so that when they have the BE, it is of no use of them.

Best you can search for the MD5.dll for that last remark.

Enjoy!