Security settings

[Paul M]

Hi
I am about to try and make my database more secure by
setting up permissions in access.
I have used the frontpage interface and results wizards
to interact and search online. will the security settings
in access mess this up if so what is the best way to
secure the database.
Best wishes
Paul M

 

[Kevin Spencer]

The best way to secure an Access Database on the web is to put it somewhere
nobody can get to it, such as a directory without Read or Browse permission.

--
HTH,
Kevin Spencer
..Net Developer
Microsoft MVP
I get paid good money to
solve puzzles for a living

 

[Paul M]

Hi
Has the fpdb folder been created with such permissions,if
not how can I make it so ,and will it affect the use of
the asp search and input pages.
Best wishes
Paul M

 

[Thomas A. Rowe]

The fpdb, if created by FP, will have the correct permissions, however as Kevin explained, the best
approach is to have it stored outside of the web root, but you host must allow you to do this.

--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
WEBMASTER Resources(tm)

FrontPage Resources, WebCircle, MS KB Quick Links, etc.
==============================================

 

[Paul M]

Thanks
So does this mean no one can download my database? In the
database wizard there is a link to database best
practices page, it says you should set read only
permissions for search pages and write only for form
pages,how is this done ,is it done in FP or Access
Best wishes
Paul M

-----Original Message-----
The fpdb, if created by FP, will have the correct

permissions, however as Kevin explained, the best

approach is to have it stored outside of the web root,

but you host must allow you to do this.

 

[Thomas A. Rowe]

Yes, it means no one can download your database from the fpdb folder, however if someone can
actually open you site for author in FP, then they have access to your database, but if the database
is stored outside of the web root, then the database would still be secure.

I don't use the FP database components, so I can't comment on that content, but the FP will set the
correct permissions, and if you need specific page or folder permissions, that would be something
that you host would have to set, as you can not set them from within FP. With Access on the database
is used on the server, not the actual Access application, so setting in Access do not apply.

--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
WEBMASTER Resources(tm)

FrontPage Resources, WebCircle, MS KB Quick Links, etc.
==============================================

 

[Paul m]

Thanks
For someone to open my site for author in FP they would
have to know my server password wouldn't they?
Best wishes
Paul M

-----Original Message-----
Yes, it means no one can download your database from the

fpdb folder, however if someone can

actually open you site for author in FP, then they have

access to your database, but if the database

is stored outside of the web root, then the database would still be secure.

I don't use the FP database components, so I can't

comment on that content, but the FP will set the

correct permissions, and if you need specific page or

folder permissions, that would be something

that you host would have to set, as you can not set them

from within FP. With Access on the database

is used on the server, not the actual Access

application, so setting in Access do not apply.

 

[Thomas A. Rowe]

Correct, but sometime a host can accidentally screw-up the FP permissions, and then anyone with FP
can open a FP enabled site.

--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
WEBMASTER Resources(tm)

FrontPage Resources, WebCircle, MS KB Quick Links, etc.
==============================================

 

[Paul M]

Hi Thomas
When I open the remote site in FP I have to use my login
and password, is this proof that the hosts FP
permissions are working.
Paul M

-----Original Message-----
Correct, but sometime a host can accidentally screw-up

the FP permissions, and then anyone with FP

 

[Thomas A. Rowe]

Yes.

--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
WEBMASTER Resources(tm)

FrontPage Resources, WebCircle, MS KB Quick Links, etc.
==============================================