Security Issue

[dealwi8me]

I have a database in which a lot of people are inserting data and everyone can have access in all records. I noticed that some records are changing so i want to add security control to my system.

Is it able to prevent one user from editing other users records?What i mean is to have only one database for my entries, but only administrator can have access to all records (i need the users to have access to the records they created only)

Is it possible?

Thank you

 

[The_Doc_Man]

Is it able to prevent one user from editing other users records?

Yes.

Requirements:

1. Users must not see the DB window. They must be restricted to forms.

2. You must implement Workgroup Security to prevent users from logging in as Admin. (There are literally a bazillion entries in this forum, use search for the topic Workgroup Security.)

3. Each record must be marked with an identifier or code corresponding to the user who entered it / has authority over it.

4. The form must be driven by a parameter QUERY (not direct from the table). The query must select for a particular userID. Because of timing issues, you MIGHT consider making an unbound form as a switchboard and having IT supply any parameters required for the bound form. Or you might wish to dynamically rebuild the query. There are quite a few ways to skin that particular cat.

5. On the form, you might need something special to create a new entry. Like a command button that doesn't go through the query underlying everything else, but maybe using recordsets instead, to define the data for the new record for the first time.

 

[Len Boorman]

The Doc Man is on the ball here and I have used a similar solution

I picked up from the Search here a method of detecting the User ID and PC Name of whoever was using that particular PC.

I automatically stamp the created record with the user ID. For editing records I use the User ID as a parameter in the edit form supporting query. User's never actually see their used id on any form. They think it is black magic (that's fair enough.

As Doc Man says there are a couple of things to bear in mind.

You must hide the database window, Switch off the F11 key, disable the bypass key and I also create a custom menu bar.

The form that detects User ID and PC has is opened by an Autoexec macro and the fields visible proberty is set to No and then a welcome form opens over the top of the User/PC ID form

It works without going to full security

Len B

 

[dealwi8me]

Thank you guyz!

This is what i did and worked in case someone else has the same problem:

I added a new field for password and when a user tries to open a form, he enters his password and the form is retrieved from a query based on password.

It was simplier than i thought

 

[dealwi8me]

You must hide the database window, Switch off the F11 key, disable the bypass key and I also create a custom menu bar.

another stupid question.... how do i do all these?