Jumat, 27 September 2013

[MS_AccessPros] RE: Security of data within a database

 

Like everyone else said, SQL Server is the only real GOOD way to lock down your data.  You could also encrypt the data in an Access back-end database. In one of my seminars I show how to basically scramble the data in sensitive fields (like credit card numbers or SSNs) with a custom algorithm. This way if someone DOES download your back-end file, at least the data they have is all garbled. You just have to use OnOpen and OnClose events in your forms to encrypt/decrypt the data on the fly inside of Access. It's a decent solution for someone who doesn't (or can't) use SQL Server.

 

Richard Rost

AccessLearningZone.com

 



---In ms_access_professionals@yahoogroups.com, <rayfrew@...> wrote:

Thanks Bill and Duane for your comments.  It seems as though a more secure network option would be the best solution.  I'll look into SQL Server express and the ramifications of introducing it.  I hope that this "nightmare" scenario has a very low probability - but the question has been asked.

Thanks for your help



---In MS_Access_Professionals@yahoogroups.com, <ms_access_professionals@yahoogroups.com> wrote:

Ray

 

No, there is nothing you can do to prevent someone with copy permissions to the server's folder from copying the database file. Access was never meant to be secure. There are ways of making it harder to steal the data but anyone with a little bit of knowledge about Access can break whatever you do.

 

I suggest you get the free SQL Server Express for your data. At least you can put some real security on the data that way. Split your database and move the tables to SQL Server. Use Windows Authentication so if your rouge employee copies the database files he will still be unable to access the data outside of the company's Active Directory.

 

Regards,
Bill Mosca,
Founder, MS_Access_Professionals
That'll do IT http://thatlldoit.com
MS Access MVP
https://mvp.support.microsoft.com/profile=C4D9F5E7-BB03-4291-B816-64270730881E

My Nothing-to-do-with Access blog

http://wrmosca.wordpress.com

 

From: MS_Access_Professionals@yahoogroups.com [mailto:MS_Access_Professionals@yahoogroups.com] On Behalf Of rayfrew@...
Sent: Wednesday, September 25, 2013 2:37 AM
To: MS_Access_Professionals@yahoogroups.com
Subject: [MS_AccessPros] Security of data within a database

 

 

Can you please help with ideas or pointers on this?

We have a simple database (Access 2000 format, used by Access 2003) that contains customer records.  The database sits on a server that everyone connects to.  The nightmare would be if an employee decides to leave, copies the database before they go and takes the information to a competitor who might approach our customers.  Is there anything in Access 2003 that can prevent this nightmare?

All ideas, pointers welcomed.

Thanks

Ray

__._,_.___
Reply via web post Reply to sender Reply to group Start a New Topic Messages in this topic (5)
Recent Activity:
.

__,_._,___

Tidak ada komentar:

Posting Komentar