
Signature
Rick Brandt, Microsoft Access MVP
Email (as appropriate) to...
RBrandt at Hunter dot com
Thank you very much, Rick. I really misunderstood the usage of this code. And
last one: does running of the enhanced code that Alex recommended mean that
only admin will be able to re-enable the by pass key by the method of running
code "from obscure location in the app" as you stated, i.e. application can
be considered to be fully "locked" for other users. And could you please just
shortly describe the way of the running this code from obscure location.
Sorry for annoying you with details, it's first time I do these security
things and am absolutely weak on that.
Thanks.

Signature
Regards,
Fuad
> > Hello Guys,
> >
[quoted text clipped - 21 lines]
> If you want to occassionally gain full access to a distributed copy then you can
> run code from some obscure location in the app that re-enables the bypass key.
Klatuu - 27 Apr 2007 14:22 GMT
I did this once by indentifying a specific user in the code. If that user
logged in, the code would unlock the bypass key. That is the ony thing I
used that user ID for.
So to get into the app, log on as the secret user, close the app, then open
it again with the shift key down.

Signature
Dave Hargis, Microsoft Access MVP
> Thank you very much, Rick. I really misunderstood the usage of this code. And
> last one: does running of the enhanced code that Alex recommended mean that
[quoted text clipped - 32 lines]
> > If you want to occassionally gain full access to a distributed copy then you can
> > run code from some obscure location in the app that re-enables the bypass key.
Fuad - 27 Apr 2007 15:32 GMT
OK, Dave. So then where did you place your code to activate it after the user
logged in by his own ID (or password). And you seem to have used CurrenUser
property to identify the logged user...

Signature
Regards,
Fuad
> I did this once by indentifying a specific user in the code. If that user
> logged in, the code would unlock the bypass key. That is the ony thing I
[quoted text clipped - 39 lines]
> > > If you want to occassionally gain full access to a distributed copy then you can
> > > run code from some obscure location in the app that re-enables the bypass key.
Klatuu - 27 Apr 2007 19:30 GMT
Put the code in the Load event of the form that opens when you open the app.

Signature
Dave Hargis, Microsoft Access MVP
> OK, Dave. So then where did you place your code to activate it after the user
> logged in by his own ID (or password). And you seem to have used CurrenUser
[quoted text clipped - 43 lines]
> > > > If you want to occassionally gain full access to a distributed copy then you can
> > > > run code from some obscure location in the app that re-enables the bypass key.
George Nicholson - 27 Apr 2007 19:08 GMT
Give yourself some backdoor within the app. Clicking on a header logo for
example.
In the click event for that logo, check the user's priviledges (or ask them
for a separate password), if they pass the test, run the code to enable the
bypass. Display a message box telling the user that they need to close &
reopen the app with shift pressed to gain full access.
If you do this, you should consider adding a line of code to whatever code
runs from AutoExec (this is the code that gets bypassed when your DB opens)
that DISABLEs the bypass key every time it runs. That way, once someone
enables the bypass, it will automatically be disabled the next time anyone
opens the file without holding down Shift. Avoids the risk of leaving the
bypass enabled simple because someone forgot to turn it back on.
Because that someone will eventually be you :-)
HTH,
> Thank you very much, Rick. I really misunderstood the usage of this code.
> And
[quoted text clipped - 44 lines]
>> run code from some obscure location in the app that re-enables the bypass
>> key.
Fuad - 28 Apr 2007 09:10 GMT
Thank you very much guys !!! I really appreciate your help and now I'm
thoroughly confident in what I should do owing to your valuable
recommendations, and thanks again.

Signature
Regards,
Fuad
> Give yourself some backdoor within the app. Clicking on a header logo for
> example.
[quoted text clipped - 63 lines]
> >> run code from some obscure location in the app that re-enables the bypass
> >> key.
Larry Linson - 28 Apr 2007 18:39 GMT
> Thank you very much guys !!! I really appreciate your help and now I'm
> thoroughly confident in what I should do owing to your valuable
> recommendations, and thanks again.
The "back door" that you're advised to allow should just be "extra
insurance". The best advice you got in this entire thread is to maintain a
development copy which does allow opening with the bypass key.
For convenience in maintenance even if it is a single-user application, and
extreme convenience in deployment if it is multiuser, you should have the
front-end (aka user interface: queries, forms, reports, macros, and modules)
in a separate database, with each user having their own copy... that
"production copy" is the one where you "button down" the security and need
to use the options for allow/disallow bypass key, and the back-end (with
tables, relationships, and data) in a separate database in the same or
shared folder. Tables in the back-end will be linked from the users' front
end databases, so you can update the application and provide a new copy to
the users without having to transfer/manipulate the data.
Larry Linson
Microsoft Access MVP
Fuad - 30 Apr 2007 07:38 GMT
Yes, Larry, it's good decision...I'll follow your recommendations, thank you
very much.

Signature
Regards,
Fuad
> > Thank you very much guys !!! I really appreciate your help and now I'm
> > thoroughly confident in what I should do owing to your valuable
[quoted text clipped - 17 lines]
> Larry Linson
> Microsoft Access MVP