Selasa, 04 Oktober 2011

RE: [AccessDevelopers] Re: Access Restriction

 

I think you are right that the user can use the saved query in Excel to access any data they wanted in the database they the query connects to.
 
What I am saying is you could create an Access database file that stored just the tables you wanted a particular user to be able to pull into Excel.  The user would have file permissions to open this Access database, but no file permissions to open the "master" database.  In the master database, you could link to the tables in this "middleman" database file.  Then data could be placed in those middleman db tables by queries triggered from the master db.  The end user would only be able to access whatever was placed in those tables, and could not open the master db directly.  You could run SELECT INTO... queries in the master db to dump the appropriate data into the tables.  You could include data just for that user but over a wide date range, and then give the ability to that user to filter and export to Excel from their middleman db, or just have them pull everything into Excel and rely on Auto Filter in Excel to narrow down to date ranges they want to view/analyze.
 
Hope that helps,
Toby
 
-----Original Message-----
From: AccessDevelopers@yahoogroups.com [mailto:AccessDevelopers@yahoogroups.com] On Behalf Of m_bacheldor
Sent: Tuesday, October 04, 2011 12:22 PM
To: AccessDevelopers@yahoogroups.com
Subject: [AccessDevelopers] Re: Access Restriction

 

Thank Toby,

It does help but I am looking at it in retrospect and if I had the access and the knowledge I would be able to use and excel file to backdoor into the queries. (At least I think that would be possible.) Even with the database locked down I am not sure that I could exclude this.

I will keep searching just in case someone else has other ideas. The only other thing that I might do is just what was suggested in an earlier post. I might have to create several front end databases and push the data into them.

Since I have never did this I am sure it will be another fun learning experience.

I look forward to any more suggestions and help to get this thing accomplished.

Mark
--- In AccessDevelopers@yahoogroups.com, "Toby Bierly" <toby@...> wrote:
>
> It is tricky to block access to data in a database yet allow them to access the same data through an Excel link. In order for the Excel file to be able to get the data, I imagine the person with the Excel file would have to have access to the Access database file as well.
>
> So then it becomes, is there a way to lock down the database so that the Excel user can't see the data. If you compile the database to an MDE, that locks down forms, queries, reports, and modules, but the data tables are still visible, so that probably won't work. You can go into Tools --> Startup... and set it so Database Window, special access keys, etc. are all disabled, but it doesn't stop users from using the Shift bypass key. There is a way to disable the Shift bypass functionality as well (http://www.access-programmers.co.uk/forums/showthread.php?t=51479), but be VERY careful or you make it so you can't access the database at all either! Backup, backup, backup!
>
> One other concern is that if people can link to the data from Excel, then they could link to any data in the database. What if you only want them to be able to link to some tables and not others. In this case, you may want to set up a seperate data file that the Excel User can access, and then block access to the main database file via file permissions. In the main database file, just link to the table that is stored in the Excel-user-accessible file.
>
> Hope that helps,
> Toby
>
> -----Original Message-----
> From: AccessDevelopers@yahoogroups.com [mailto:AccessDevelopers@yahoogroups.com] On Behalf Of m_bacheldor
> Sent: Tuesday, October 04, 2011 8:48 AM
> To: AccessDevelopers@yahoogroups.com
> Subject: [AccessDevelopers] Access Restriction
>
>
>
> Good Afternoon,
>
> I have gotten my database working pretty good for now, but now I am faced with a security issue. Is there a was to restrict access, who can open the database, but still allow users to access data through linked/restricted excel files?
> I have set up excel files that have hard code linkes to the database queries. I would like for the users to be able to refresh the data from the excel files but I do not want them to be able to open/access the database.
> It seems like the requirements that I am given to complete this task change daily.
>
> I appreciate you responses,
>
> Mark
>

__._,_.___
Recent Activity:

Please zip all files prior to uploading to Files section.
MARKETPLACE

Stay on top of your group activity without leaving the page you're on - Get the Yahoo! Toolbar now.

.

__,_._,___

Tidak ada komentar:

Posting Komentar