Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion GroupsFormsForms ProgrammingQueriesModules / DAO / VBAReports / PrintingMacrosDatabase DesignSecurityConversionImporting / LinkingSQL Server / ADPMultiuser / NetworkingReplicationSetup / ConfigurationDeveloper ToolkitsActiveX ControlsNew UsersGeneral 1General 2
Access DirectoryToolsTutorialsUser Groups
Related Topics
SQL ServerOther DB ProductsMS OfficeMore Topics ...

MS Access Forum / Security / February 2007

Tip: Looking for answers? Try searching our database.

How are they opening this form?

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
RipperT - 14 Feb 2007 02:15 GMT
All,
I have a split, secured DB with a form called Startup configured to run
in startup options under Tools > Startup. I have a user group called
LineStaff. Everyone is a member of this base group. The default users
group has no permissions except Open/Run to the DB. I found out
(by accident) the other day that the only group that
has any permissions to form Startup is Admins, yet everyone is able to
login and open the Startup form and I can't figure out why. Shouldn't all
users except those in the admins group be stopped at the Startup form?

Please help me understand how they are getting into form Startup.

S.
Joan Wild - 14 Feb 2007 15:01 GMT
> All,
> I have a split, secured DB with a form called Startup configured to run
> in startup options under Tools > Startup. I have a user group called
> LineStaff. Everyone is a member of this base group. The default users
> group has no permissions except Open/Run to the DB.

Why does the Users Group have permission to open the database object?

> I found out
> (by accident) the other day that the only group that
> has any permissions to form Startup is Admins, yet everyone is able to
> login and open the Startup form and I can't figure out why. Shouldn't all
> users except those in the admins group be stopped at the Startup form?

They shouldn't be able to open the form; double check that no other group
has open permission on that form.  Also check the permissions that each user
has on the form.  They can open it if the username has permissions, if any
group they belong to has permissions, or if they own it.

Signature

Joan Wild
Microsoft Access MVP

RipperT - 16 Feb 2007 01:39 GMT
After much investigation, I've decided that it's the permissions to the
default users group to open the DB object. I think this is true because
when I remove that permission and log on as my staff test user (member
of linestaff and default users), I can't get past the login box. The
linestaff group has no permissions to the Startup form. So, if I remove
the default user group's permissions to open the DB, and give group
linestaff permissions to the Startup form, everything proceeds normally.
However that does not explain how the default users group is getting
into the Startup form under the original arrangement. No single user has
permissions to it. Only group Admins and one other group (of which no
one is a member) has permissions to the Startup form, and I own
everything in the DB. I don't get it. At least I am able to set it up
properly, but I would like to understand why the default users were
getting into form Startup.

Many thanx,

Ripper

>> All,
>> I have a split, secured DB with a form called Startup configured to run
[quoted text clipped - 14 lines]
> user has on the form.  They can open it if the username has permissions,
> if any group they belong to has permissions, or if they own it.
Joan Wild - 16 Feb 2007 14:25 GMT
The Users Group should not have permissions to *anything*.

However, having permissions to open the DB doesn't necessarily get the Users
Group anything else.

It is easy to miss a permission that some user of group has.

As a test, give the Users Group open permission on the DB object.  While
joined to the standard system.mdw workgroup file, you should be able to open
the mdb.  Can you then also open *any* object?

Signature

Joan Wild
Microsoft Access MVP

> After much investigation, I've decided that it's the permissions to the
> default users group to open the DB object. I think this is true because
[quoted text clipped - 34 lines]
>> user has on the form.  They can open it if the username has permissions,
>> if any group they belong to has permissions, or if they own it.
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.