An A2003 to A2007 security question

S

Salad

I was asked to make an existing app at work a bit more secure. It is
written in A2003 and will soon be ported to A2007. All users have
Access retail on it so right now it is not in MDE format but MDB.

I was asked to disable the Database window and also the Shift bypass key
in the A2003 app but I need to also consider the future use of the
application when moved to A2007.

Currently in the app no forms or reports has a menu or toolbar
associated with it. The previous developer had "Allow Full Menus" set
to false. That was it.

I inserted code on the startup form to disable the ShiftBypass key. I
also removed "AllowSpecialKeys" from the StartUp options.

I created a security group titled DBWindow and added a couple of users
with "superuser" rights, like myself, to it. Then I created a menubar
for the startup form in the app with the menu option DBWindow. If a
member of the group DBWindow presses that option, the database window is
presented. If not a member, they are told they are not a member of the
group and never see the database window. I only want to have the
database window opened from a central location, the startup form, and
not in any other forms.

Interestingly, with AllowFullMenus being set to false, those that can
access the db window don't have the FullMenus. I don't really know if
they need that capability or not. I think only I or another developer
would need FullMenus, any body else wouldn't. Your experience or advice
would be appreciated.

The machine I am using has A2003 and does not have A2007 installed. I
will have A2007 installed later, most likely after the New Years.

The current A2003 app uses an MDW file and seems to be locked down
nicely. When I change the app to 2007, it will not be converted to
A2007 format so it will keep the current ability to use the MDW file and
both A2003 and A2007 users can use it.

By disabling AllowSpecialKeys and AllowFullMenus and disabling the
ShiftBypassKey and providing a startup form, will that effectively stop
the NavigationPane from being accessible in A2007? With A2007 not using
A2003 menus, where or how do I pressent an option to get to the database
or Navigation pane? Should I present a command button on the startup
form for DBWindow that checks the sec group DBWindow and permits or
disallows it?

Thanks for any advice you can provide. If I've left out any crucial
bits of information out regarding my problem, please let me know.
 
S

Salad

Salad said:
I was asked to make an existing app at work a bit more secure. It is
written in A2003 and will soon be ported to A2007. All users have
Access retail on it so right now it is not in MDE format but MDB.

I was asked to disable the Database window and also the Shift bypass key
in the A2003 app but I need to also consider the future use of the
application when moved to A2007.

Currently in the app no forms or reports has a menu or toolbar
associated with it. The previous developer had "Allow Full Menus" set
to false. That was it.

I inserted code on the startup form to disable the ShiftBypass key. I
also removed "AllowSpecialKeys" from the StartUp options.

I created a security group titled DBWindow and added a couple of users
with "superuser" rights, like myself, to it. Then I created a menubar
for the startup form in the app with the menu option DBWindow. If a
member of the group DBWindow presses that option, the database window is
presented. If not a member, they are told they are not a member of the
group and never see the database window. I only want to have the
database window opened from a central location, the startup form, and
not in any other forms.

Interestingly, with AllowFullMenus being set to false, those that can
access the db window don't have the FullMenus. I don't really know if
they need that capability or not. I think only I or another developer
would need FullMenus, any body else wouldn't. Your experience or advice
would be appreciated.

The machine I am using has A2003 and does not have A2007 installed. I
will have A2007 installed later, most likely after the New Years.

The current A2003 app uses an MDW file and seems to be locked down
nicely. When I change the app to 2007, it will not be converted to
A2007 format so it will keep the current ability to use the MDW file and
both A2003 and A2007 users can use it.

By disabling AllowSpecialKeys and AllowFullMenus and disabling the
ShiftBypassKey and providing a startup form, will that effectively stop
the NavigationPane from being accessible in A2007? With A2007 not using
A2003 menus, where or how do I pressent an option to get to the database
or Navigation pane? Should I present a command button on the startup
form for DBWindow that checks the sec group DBWindow and permits or
disallows it?

Thanks for any advice you can provide. If I've left out any crucial
bits of information out regarding my problem, please let me know.

I really am suprised that in a newsgroup devoted to Access security I
stumped the group.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top