Re: SQL DB with legacy Access Frontend - How do we stop people getting in through the backdoor?



Use application role for your Access application and limit your SQL Server
roles and groups.

"Sean" <sean@xxxxxxxxxx> wrote in message
news:%23hWE4Py2HHA.1484@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

We have had instances where certain clued up individuals in our
organisation (one with an IT Degree), have engineered a way of getting
around the frontends to manipulate the data direct, this has caused some
problems with loss of data as the individuals concerned didn't know as
much as they thought they knew.

The DB Admin has asked me to look into a way of securing access through
the OS as he says that with the present access based system it just isn't
doable at a DB level.

Our DB Admin said they need to have permission to modify data in certain
tables, thing is we use Access frontends and these (I am informed) cannot
be locked down as Access (2000/2003 in our case) isn't that intelligent.

He asked for me too look into locking down ODBC at the users OS level, I
was wondering if anybody had any idea's about this or thought's about
locking it down at Access or SQL level that we may not already have
thought of.

FYI: Win 2K Domain, Win XP Pro Clients with mix of Access 2K/2K3

Cheers

Sean



.



Relevant Pages

  • Re: Error 3155- Is there no solution?
    ... You might want to look at all processes that use the Materials table - ... Whatever is creating the conflict is most likely locking the table to ... How could anyone use SQL Server in a useful way if tables ... the end of the day to append any records that weren't already in the main ...
    (microsoft.public.access.externaldata)
  • Re: Clustering and SA Role
    ... It helps if your Domain/Enterprise Administrators, Server Administrators, ... > I guess the issue is that in SQL2000 one could remove local admin group ... > legitimately getting into SQL Server. ... Trust for sure simplifies management in many ...
    (microsoft.public.sqlserver.clustering)
  • Re: row vs page locking...
    ... so they automatically escalate to page level locks. ... 'Lock Escalation' - see Books Online. ... SQL Server 2005 is going to have a Snapshot ... Good old fashioned locking is less sexy, but I find, more productive! ...
    (microsoft.public.sqlserver.server)
  • Re: Account to Run SQL under?
    ... you use AD Global Groups to grant the SQL Server DBAs administrative access, ... How to impede Windows NT administrators from administering a clustered ... with great power comes great responsibility. ... If you do not want local administrators to have system admin access rights then all you need to so is restrict the BUILTIN\Administrators rights. ...
    (microsoft.public.sqlserver.server)
  • Re: The Microsoft Search service cannot be administered under the present user accou
    ... When you changed the SQL-Service to run with Local User account (with admin ... rights), did you make this change in the SQL Server 2000 Enterprise Manager ...
    (microsoft.public.sqlserver.fulltext)