[AccessD] Access Security - Web Based ASP

I have an existing .mdb "protected" only by an API call to
GetUserName...very limited access.  It contains time charging data for the
entire department ("company confidential...need to know" type stuff).

In the simplest of terms, what is the minimum necessary to achieve the
following scenario?  I would like a user to be able to access ONLY THEIR
time charging data through a web page interface.  Are there alternatives?


Mark