Security Leak With Access File On Server
Jun 13, 2005
I have just started working with a team on a database that is available to everyone in this office. We have tried to lock it out and assign permissions by using workgroups, running security wizard, giving users no permissions, and deleting the Admin user, however none of this has sealed the database. The workgroup file is seperate folder on the server and the shortcut we make people use links to that workgroup. However Access is still defaulting to seperate workgroups on users personal computers. Is there anyway we can prevent this? Thanks.
View Replies
ADVERTISEMENT
Jan 15, 2006
I've create an ms access security workgroup and put .mdb and .mdw file to a folder under any acount on a server. When these files in my local machine it work properly. But when these files on server I myself cannot open .mdb file.
How to make ms access security on a server ?
View 1 Replies
View Related
Nov 21, 2007
I'm not sure which is the better of two options-
My problem is I need to make it easy for my users by authenticating themselves once when they open the database. User-level security is adequate for that job, but when I need to use the authentication information for connection string, I'm a bit antsy about storing it somewhere in Access, as I understand that passwords shouldn't be stored in the database itself (and as far as I can tell, it's not even encrypted or hashed!)
I am wondering if converting it to MDE would be sufficient to encrypt the password or will it still be apparent using a hex editor? I also know that Jet can try to use its own security to authenicate to the back-end, but not sure what I need to do to prompt Jet to pass along the credentials.
Alternatively, would it be better to somehow implement login using backend's security model, if even possible?
TIA.
View 14 Replies
View Related
Nov 15, 2013
I'm experimenting with MS Access, and I've successfully split an MDB someone created into two files. I can access the database from 2 computers at once using the front end file connecting to a file server which hosts the _be.mdb file.
Could the _be.mdb file theoretically be on a NAS without any computer attached, or is there some runtime or full version of Access that needs to run on the machine with the back end file?
View 2 Replies
View Related
Oct 24, 2005
Hi
I have a database that currently has security in place so that users input their own usernames and passwords to access the database. The users have recently been added to a windows 2000 server and I want to be able to use their windows 2000 server logon credentials to provide them with automatic access to the database. Is there anyone out there who knows how to set this up? It is a rather urgent request if you could get back to me either on this forum or via email
chris@ctbjs.co.uk
many thanks
Chris
View 1 Replies
View Related
Jun 4, 2007
I am making a database to coordinate the activities of my band (how rock and roll!)...
Is there a way I can somehow host the file remotely, and have users (4 total) access that file through their own computer using access, so they can write, edit, delete records?
We have a db at my work that we use like this, accessing from multiple computers, though this is on a network drive.
View 2 Replies
View Related
Jul 11, 2013
I need some simple code that will copy an Excel file or a table in Access to a specific location on an FTP server. I would think this would be a very simple task, but I have yet to find any sample code that is *simple*. I have seen lots of code that requires downloading this dll or that mda, but the examples don't work. There must be something built into MS Access 2010 that will allow a file to be uploaded to an FTP site.
All the variables are known:
The FTP location (it never changes)
The FTP Username and Password (they never change)
The destination folder on the FTP site (it never changes)
The File type (it never changes)
The File name (available from the form in Access from which this will be executed)
I can either produce an output file, then copy it to the FTP site, or I can export the table directly to the FTP site with the file name for that day.
This seems to be a very simple task with no simple solution. Currently I am using an FTP app to get the file to the FTP site, but I would like to automate this. The process that creates the output file is already automated, so I would just like to add this to the existing code as its own module.
I'm looking for a simple command on the idea of:
DoCmd.FTPFile, acExel, TableName, FTPFilePath, FTPFileName, Username, Password, acUpload
just made all that above up and none of it is a real function/command in VBA, but is just the kind of thing I'm looking for.
I would think that since I can download and XML file from an FTP site that it should be child's play to upload a simple file to an FTP site, but I can't figure it out.
View 8 Replies
View Related
Nov 29, 2004
I've placed my database on our office server. The database has a security file attached to it and must be launched via a shortcut.
I've copied the shortcut on to the desktop of another machine, and when I launch the short cut, it prompts for the password and all that, but won't open the file. You get a message saying something like: "File is not on the Intranet or may not be from a trusted source. Could not open this file at this time."
Any idea how to get around this problem?
Thanks
View 3 Replies
View Related
Jan 12, 2008
I am in need of some assistance regarding SQL Server ODBC links and security. This is for a project at work...
1) I have an MDB that has linked tables through ODBC to a SQL Server 2000 database. This is how I chose to write this multi-user application (instead of the ADP method).
2) My IT department created a user ID that the application will use to connect to the database. They chose this method instead of having to create many user accounts with varying permissions. I have programmed permissions within the application.
3) After linking the tables through ODBC, it defaults to my Windows User ID for the connection. Because of this, I have used a connection string with the application's User ID/Password and perform a RefreshLink on all linked table definitions on startup to ensure valid connection.
This is successful, but my IT department is seeing that another user is attempting access to the SQL Server database--the username in the LDB/MDW file! This is what I don't understand. If I open the database without going through workgroup security, the word "Admin" is passed and the authentication fails. If my users would login through the MDW file, their user IDs would be passed and again, authentication will fail as they are not valid users (only the application ID would be valid).
What is really going on here? :confused: How can I prevent the "Microsoft Access User ID" from being passed through the ODBC link?
Here is a sample of the connection string I'm using:
Driver={SQL Server};Server=ServerName;PersistSecurityInfo=Yes; AnsiNPW=No;Database=DBName;Uid=Username;Pwd=Passwo rd;
View 2 Replies
View Related
Oct 20, 2006
I have 5 combo boxes on a form. Everything worked well until I had to make some changes in the tables - I had to change the data type of primary key columns from Long Integer to GUID!
Now, my combo boxes are bound to GUID data fields, and when a user scrolls through records - I have huge memory leak (about 40KB per record)!
And no matter how long you scroll through the same recordset, every time the current records is changed - I loose 40KB of my memory!
When Bound Column of Combo box is not GUID data type - I have no problem with memory leak!
Any suggestions?!?!?
What to do?
Thanks in advance!!!
View 2 Replies
View Related
Mar 26, 2007
I've read and gone though quite a few of the scrips and examples for creating logins and security and i'm getting to the stage when i need to have good understanding of the different methods.
Some of the examples whilst create a user login do not really allow for security within the database whilst the build in security wizard would appear to offer that functionality.
I am thinking that I will use the Workgroup file and that method. My question is am i able to utilise the fact that if a person 'AdamA' logs onto the database which is built into the workgroup security file. am I then able to take 'AdamA' to populate a table which records actions by a user? (I can't seem to find any thread or book reference to doing this)
View 4 Replies
View Related
Nov 2, 2014
I need deleting a file from a ftp server. I have the code for uploading but I can't seem to figure out how to delete a file. This is the FTP module I'm using
Code:
Public Sub UploadFileToFTPServer()
On Error GoTo ErrHandler
Dim lngRet As Long
Dim abytData() As Long
Dim lngBytesWritten As Long
[Code] ....
And this is the code for uploading i use in the form when i click a button
Code:
Dim objFTP As FTP
Const conTARGET = "ftpserver"
Set objFTP = New FTP
With objFTP
[Code] ....
All that works like a charm.
Code to delete a file from the ftp server, i'm kind of stuck.
View 3 Replies
View Related
Sep 13, 2013
This is a follow-on to my post here: [URL]....
How can I change the code to delete the file if it exists?
View 1 Replies
View Related
Sep 13, 2013
I found and modified this code to allow me to check (fast) if a file exist on a http server or not (without downloading it).
Code:
Public Function CheckNetFile(WebFile As String)
Dim XmlHttpReq As Object
Set XmlHttpReq = CreateObject("Microsoft.XMLHTTP")
XmlHttpReq.Open "HEAD", WebFile, False
[Code] ....
In the above code I managed to declare Webfile as a string so I can call on it later but one thing I still need to tweak is to also get a result out of the test code in a better way than having to publically declare the "CheckNet" variable somewhere else in my app.
First prize would something like this:
If CheckNetFile ("http://www.mysite.co.za/test/test.txt") = 1 then "Yes" else "No"
How do I build the 'booleon check' into the original function?
View 5 Replies
View Related
Feb 23, 2013
We have a server that we use to run a Microsoft Access application. This application creates folders, subfolders and files on the server.Users are in 4 different offices. Each office has at least 3 computers. Some users also work from home.
Users creates file through word, or scanning a document or by saving an email on their local pc.My problem is that users need to be able to save a file to a specific folder on server.
View 1 Replies
View Related
Nov 30, 2005
Hi all,
We are changing domains and are doing alot of bouncing around with passwords and such.
Now all my users who are not in admins can not open our Db.
We get a message 'Could not lock file'. Any ideas?
thanks
View 3 Replies
View Related
Apr 4, 2007
Hello all:
using Access 2000.
I'm using the mdw file to secure a db and I have installed it on a few computers and it works fine. The shortcut is
"C:Program FilesMICROS~2OfficeMSACCESS.EXE" "C:Vero InventoryVERO INVENTORY_fe.mde" /WRKGRP "C:Vero InventorySecured.mdw"
There is a local folder on each workstation holding the front end and I've given full access to this user and made sure the permissions propagated to the actual mde file itself.
There's one computer that tells me it can't find the db when I run the shortcut. It has the same setup as all others....
Any ideas?
thanks
View 3 Replies
View Related
Mar 25, 2008
I need to know if there is anyway to view any changes made to the security workgroup file I have with my database. I need to know when or if someone is changing it to allow someone else full access to the database, any help would be greatly appreciated.
View 3 Replies
View Related
Oct 27, 2004
This is more of a point of interest then a question, at work, Access defaults to a central workgroup file, so all Access files opened on a work machine will prompt for a user name and password, and only let you in if you get it right... but if you move the work group file, even after it has been open using that workgroup file, it will just let you straight in and GIVE YOU ADMIN RIGHTS!
No one really seems to know about this... does it happen if you manually set the workgroup file? Or is this just a security hole if you rely on the default? I'm not sure yet, haven't tested, but i fell people should be made aware (happens for sure on Access2002, haven't tested it on any others)
-mwalts
View 4 Replies
View Related
Oct 5, 2003
I am a newbie and I am having a problem with MS Access 2000 security.
I have created a workgroup information file for a database to secure a database using a user level security. Everything seems to work ok if I use this WIF. But if I join the system.mdw file the database is not secure and opens without prompting for login. Please let me know if there is a method to block the user from using the system.mdw file.
View 4 Replies
View Related
Jan 8, 2006
Hi
I've done every search I could think of, but haven't come up with a solution.
I'm having a problem with file system security settings of windows 2000.
I have a FE/BE database setup, the BE is stored on a network drive that all users have access to. The FE is stored in the same spot on every workstation (C:dataXXXXXX.mdb). The FEs demonstrate considerable bloat and I understand that the solution is frequent Compact and Repairs.
However, each physical workstation is used by more than one user (different shifts) and the compact process removes the Everyone file system access from the database and replaces it with Administrators, and the current user; thereby preventing anyone other than the compacting individual from accessing the FE on that computer.
Is there a solution??
thanks
Jesse
View 1 Replies
View Related
Mar 14, 2007
Hello people of access world forums. I've decided to design a simple access db with 2003 version but with 2000 compatibility and everything appear to work ok.
After designing and testing the db, I have set the Jet user-level security options as described in some documentation and set the startup options too for a "clean type" start. Everything is ok: I have created the workgroup in a new .mdw file, joined the workgroup, set the users, set the groups, protect the forms I wanted to. If I try to open the db, it asks for user and password and the db works as espected about security.
But if I delete, move or change the .mdw filename, the db turns accesible without the implemented security. Only the startup option works but no user is prompted and the protected items turns unprotected.
I would like to know how can I associate the .mdw to the .mdb so I can't access the .mdb if the .mdw file is not present (i.e. copying the .mdb to another computer or something).
Thanks in advanced.
Kish
View 8 Replies
View Related
Mar 14, 2005
every time i open .mdb file, i get a security warning that the file may be not safe to be opened if it conatins some code that might harm my computer.
in order to open the file' i have to press open.
how can i avoid this warning?
thank you.
View 4 Replies
View Related
Dec 5, 2007
We're currently looking at changing a couple of my more complex Access 2003 databases to Access Front End with a SQL Server Back End. This should give us better stability and reduce network traffic loads. I was looking at the Access help file on Upsizing and came across the following paragraph. On face value to a novice like me this would seem the easy option - but is it?
"Create an Access database front-end to an SQL Server database back-end so that you can create a front-end/back-end application.
This approach requires very little application modification since the code is still using the Jet database engine. "
Would anyone recommend this approach?
View 4 Replies
View Related
Feb 15, 2006
I am importing an Excel file into a table in SQL Server that was created by an AS400 program.
I linked this table in MS Access. The date fields from the SQL Server table are split out. DSREQM is the month and day. DSREQY is the year. When opening the table it looks like this:
DSREQM DSREQY
215 6
I need to be able to convert this is a field to 2/15/06. However I cannot get this to work. For some reason when I execute the query it comes out as 8/02. Here is what I have:
DelDate: Format([DSREQM],"mdd") & "/" & Format([DSREQY],"y")
Any ideas?
View 5 Replies
View Related
Aug 29, 2007
Hi
I am attempting to write an application, using Access2003 as the front end. The Backend May be either Jet (ie an MDB), or SQL Server.
I am trying to make it so that the same code works regardless of the back end.
My approach has been to set the forms recordset to an ADO recordset like so:
Set Rs = New ADODB.Recordset
'Rs.CursorLocation = adUseClient
Rs.CursorLocation = adUseServer
Rs.Open strSQL, gcn, adOpenDynamic, adLockOptimistic
'
Set Me.Recordset = Rs
Anyone done this, and willing to sahre information/pitfalls.
First problem I am encountering is that Jet only seems to like .CursorLocation = adUseClient, and SQL Server only seemns to like .CursorLocation = adUseServer
View 6 Replies
View Related
