User Level Delete Permissions

[saip15]

User Level Update Permission still allows delete.

Hi,

So I have my ULS set-up and I have my group permissions set. I have the user group denied all permissions. All permissions work fine for the read-only user that i have set-up but when I apply the Update permission they are able to delete records? I want them to be able to add entries but not delete data.

Thanks

 

[The_Doc_Man]

Access uses the Windows paradigm of "maximizing" permissions. In English, that means that permissions are additive. If you have two possible group memberships (which most people do if one is Users and the other isn't), you have the permissions both of Users AND of the other group. Look for a possible bleed-through of mulitple permissions due to multiple group assignments, maybe?

 

[saip15]

I'll check again but i'm certain that the Users group has no permissions. Because when i change the other user group to read only it works just fine. Maybe I am mis-understanding what the delete permissions means. I thought it mean't you can't delete any information in a record. So how does it work when entering data, does it let you delete what the user has entered in until it saves? Or after every letter you enter you can't delete that last letter? Thanks so much!

 

[saip15]

If the update data permission allows deletions then why is there a delete data permission as well? Should I try to make another group? Thanks

 

[The_Doc_Man]

What I would do is if you find that the user is a member of a group that you don't want doing deletions, see about tailoring the form's properties to disallow deletions. Look at the "Allowxxxx" properties to see what you can disallow. Then, in the form's OnCurrent routine, evaluate user permissions and turn off what you don't want them doing.

On the other hand, if you are allowing access to the DB window, you are screwed already because you've already lost control of your data.

 

[gemma-the-husky]

i think the delete etc refers to permisisons acting on the database object - not the data contained within the form


i doubt even that "table" permissions will give you that - i suspect that is delete the table, not delete records.

add/edit/delete (reocrds!) are all the same privilege setting, I would have thought

 

[saip15]

That's what i thought. The objects involved for the permissions says all 4 (read,update,insert,delete) affect tables and queries.