Filter views based on login/PID

[Lori]

I am trying to filter/restrict access of records based on
how a user is logged in - not who created the records.
For example, I want a salesperson to be able to only view
their orders. They have a login and I have created user
names/groups. Someone answered a similar question below,
but I don't want to base views by who created the records,
but by who "owns" it (their employee name is in an
employee table and is linked to each form/report).

Thanks,

Lori

An easier & simpler method is to do it
through VBA code. Define a field in each table, to hold
the username of the
user who created that record. Code the BeforeUpdate event
of each form, to
put the value of the CurrentUser() function into that
field. Now each record
knows who created that record. Then base each form on a
query like:

SELECT * FROM MyTable WHERE CreatedBy = CurrentUser()

 

[TC]

Given a record, how should the system answer the question, "Which users are
allowed to see this record?".

TC

 

[Lynn Trapp]

Lori,
Will a logged in user other than the "owner" of the records be creating the
records?

--
Lynn Trapp
MS Access MVP
www.ltcomputerdesigns.com
Access Security: www.ltcomputerdesigns.com/Security.htm
Security FAQ: http://support.microsoft.com/support/access/content/secfaq.asp

 

[Lori]

Sometimes another person will create the record for the
salesperson. so the answer is yes.

 

[Lori]

The "employee" that is attached to each record. I need to
find a way to tie in the login/PID to the employee, so I
could filter the records by whoever is logged in.

 

[TC]

Sorry, I still don't understand.

- How is an employee "attached" to each record?

- What do you mean, to "tie the login/PID to the employee"?

Perhaps give us a specific example.

TC

 

[Guest]

For example: I have a table called Employees and a table
called Sales Orders. When entering a Sales order, the
data entry person selects an employee from a combo box
(which is linked to the employee table). When a
saleperson logs in I want them to only see the Sales
Orders that have their employee name selected. They do
not enter their own orders, so I can't do the CurrentUser
() owns record. I can add the login information to the
employee table if I need to.

 

[TC]

Ok - *now* I've got you!

So, Dick Jones enters a new sales order, and during the data entry process,
he assigns that order to salesperson Jane Smith.

Then, whenever salesperson Jane Smith logs on, she should be able to see
that order. Other salespersons should *not* be able to see that order.

Here's how I'd do it.

Take the combo box where the data entry person says which salesperson the
new order is for. Have that combo box display the salesperson's name (eg.
Jane Smith), but actually *save into the record* the salesperson's *Access
username* (JSmith or whateever).

Then just base the salesperson's form on a simple query:

SELECT * FROM SalesOrders WHERE ForUser = CurrentUser()

where ForUser is the field containing the Access username of the salesperson
who that order is for.

Simple! Yes? No?

HTH,
TC

 

[Lori]

Thanks! I think this is just what I need. Now all I have
to do is tackle installing security correctly.