Protecting Your Application with MS Access

1
Protecting Your Applicationwith MS Access

• Shaun Simpson
• MIS 372
• WSU Vancouver

2
Access Control

• Options
• Microsoft Access User-Level Security
• Security Wizard

3
Security Options

• User-Level Security
• Most Powerful
• Most Flexible
• Complex
• May exceed situation requirements

• Other Options
• Use startup options
• Establish an open database password
• Save Application as MDE (remove source code and
  prevent changes)

4
Other Options

• Startup
• Tools, Startup, Advanced Clear Allow Full
  Menus, Allow Default Shortcut Menus, Display
  Database Window, Allow Built-in Toolbars, Allow
  Toolbar/Menu Changes, and Use Special Keys
  Also in VB set the AllowByPassKey to False.

5
Other Options

• Database Password
• Close the database and make sure no other users
  are accessing it. Make a backup copy of the
  database.
• File, Open Database, Select Exclusive (check box)
  and then open
• Tools, Security, Set Database Password, Type the
  Password, and confirm it. (passwords are case
  sensitive)
• Note setting a password does not encrypt the
  database (Can be read with text editor).
• Any user who knows the password and has access to
  Remove Database Password can change or clear it
  or add one if there isnt one.
• Does not work with Replicated Databases.

6
Other Options

• MDE File
• Prevents modifying the design of forms, reports,
  or modules, but does not prevent modification of
  tables, queries, relationships or macros.
• MDE does not create a run-time database users
  must have Access 97 or you can use the developers
  Edition to create a run-time version and
  distribute the database.
• Save a backup of the Source file.
• To create an MDE file
• Close the database and make sure no other users
  have it open
• Tools, Database Utilities, Make MDE File.
• In the Save as MDE box, specify name of
  database you want to save and click make MDE,
  specify a file to save it as.

7
Microsoft Access User-Level Security Model

• Workgroup
• User and Group Accounts
• Default Admin, Admins

Workgroup Information File
Your Database
Group
Object
User
Permission
Access retrieves Access checks
identity of user users permissions
for object
Microsoft Access
8
Users and Groups

• Users and Groups (Tools, Security)
• Admin - default user - full permissions, all
  users
• Admins - default group - Change permissions,
  modify users and groups, clear passwords.
• Users - default group account

9
Permissions

• Explicit (User)
• Implicit (Group)
• Least Restrictive of explicit plus implicit
  permissions
• Create Groups and assign permissions to groups
• Permissions can be changed by
• Member of Admins group
• Owner
• Any user with Administer permission
• New Objects Default permissions ltNew Objectgt

10
Ownership

• User who creates object
• Owner can always grant permission
• Database Owner - can create objects and grant
  permission

11
Changing Ownership

• To change ownership
• Change Owner- Tools, Security, User and Group
  Permissions, Change Owner.
• Recreate object - copy, import, export
• Database Owner - must create new database and
  import all objects--User-Level Security Wizard
• To recreate an object you must have Read Design
  permission for object, for table or query Read
  Data permission
• Note Recreate does not change RunPermissions
  property set to Owner, you must own a query or
  RunPermission has to be set to user.

12
User-Level Security Wizard

• Create secure Workgroup information file
• Tools, Security, User and Group Accounts
• Create new user to be owner and administrator of
  database. Add that user to Admins group.
• Assign a password to the admin user. Causes
  logon to appear next time you start access.
• Remove Admin user from Admins group
• Exit access and login as the administrator you
  created. Open the database you want to secure.
• Select the objects you want to secure If you
  chose all objects the Users group Open/Run
  permission is removed from the database and only
  members of the Admin group can open and run the
  database.
• Create your own users and groups assigning
  appropriate permissions to the group

13
Assigning Permissions

• Users and Admins Group
• Assign appropriate permissions to these groups
• New users are added to Users by Default
• Your own Groups and Users
• For finer security
• Assign permissions to Groups
• Typical Permissions
• Tables and Queries - Read / Update Data
• Forms, Reports, Macros - Open / Run

14
Security without Log In

• Follow User-Level Security Wizard
• As member of Admins, assign permissions to Admin
  user for objects you want available to everyone.
  (Admin should no longer be member of Admins.)
  Users auto login as admin.
• Clear the password for Admin user.
• Do not distribute workgroup information file
  except to administrators.