[AccessD] Security Problem w/existing program

MartyConnelly martyconnelly at shaw.ca
Mon Aug 8 13:01:59 CDT 2005


I wouldn't mind a peek at your shortcut command line, curious if you 
also have a workgroup file there.
or you are using the default system.mdw
It could also be that your original shortcut command line  was running a 
.vbs file to start things off like below.
You could add code here to determine login id etc.

I trust you have sent off the local villagers with pitchforks and 
torches to hunt down the original program documentor.

'Begin VBScript
dim Ws
dim s
set Ws = CreateObject("Wscript.Shell")
s = """d:\program files\microsoft office\office\msaccess""" & _
 " " & """f:\access\testarea\test.mdb­""" & " /compact"
ws.run s,,-1  
s = """d:\program files\microsoft office\office\msaccess""" & _
" " & """f:\access\testarea\test.mdb­"""
ws.run s,,0
wscript.quit(0)
'End VBScript

John Clark wrote:

>We got it working. Somehow the shortcut was changed, and it was missing
>"/user" at the end of the command line. Without this, the program just
>opened up, but was the same user, with limited rights, for everyone
>(this is what I meant by missing...no login). 
>
>Although it is now working, the user has to enter their password, which
>was automated before. It used to bring in their Citrix login ID or of
>the Windows server it is on. Maybe y'all know how to do this? What is
>the syntax, in a shortcut, to drag in a users Windows ID?
>
>I am glad I asked for help though, because I did learn something. I
>hadn't realized that the extensions could be changed. I am going to look
>into this a little more, because it may be useful for me.
>
>  
>
>>>>jimdettman at earthlink.net 8/8/2005 9:29 AM >>>
>>>>        
>>>>
>John,
>
><<The program is working fine actually, but the security has
>disappeared.>>
>
>  Please define "disappeared".  What is or is not happening?
>
><< I am
>now wondering if this is using some add-in that supercedes standard
>security procedures.>>
>
>  Access databases can have any extention and still execute (except
>for
>LDB).  It is possible that the developer has implemented their own
>security
>setup within the app and Access security is not being used.
>
>  I would also ask; Has anything changed recently?  Hardware, software,
>OS,
>setup, etc.
>
>Jim.
>
>
>-----Original Message-----
>From: accessd-bounces at databaseadvisors.com 
>[mailto:accessd-bounces at databaseadvisors.com]On Behalf Of John Clark
>Sent: Monday, August 08, 2005 9:19 AM
>To: accessd at databaseadvisors.com 
>Subject: [AccessD] Security Problem w/existing program
>
>
>Somebody at work came to me w/a problem today. Their program, which
>runs
>on a Citrix box, is written in AXP, so they figured I could help them.
>I
>am feeling a little dumb though because I'm not getting anywhere w/it.
>
>The program is working fine actually, but the security has
>disappeared.
>Now, I don't have much experience with Access security to begin with,
>but I have been able to muddle my through it, in the past. However,
>everything I've dealt with in the past seemed to include an MDW file,
>but no such animal exists in this environment (did this go away with
>XP?). I looked at a backup directory they have and it isn't there
>either, which leads me to believe it is not just missing.
>
>Instead however, there are a bunch of files I have never worked with
>(i.e. .MDO, .MOD, .ODB, .MDA, .MOA). I found nothing, in a search, for
>.MDO files, but I found out that .MDA files are "Access Add-ins." I am
>now wondering if this is using some add-in that supercedes standard
>security procedures. When working though, I believe it acts the same
>way...they still go into DB security and manipulate workgroups and
>users, and their rights.
>
>Does anyone have any ideas of how I can troubleshoot this? I realize I
>may not be giving enough info, but I really don't know what else to
>add,
>at this point, so just ask if you need it. I am headed back into it
>now,
>but I'll check back in a bit to see what y'all might have for me.
>
>Thank you!
>
>John W Clark
>--
>AccessD mailing list
>AccessD at databaseadvisors.com 
>http://databaseadvisors.com/mailman/listinfo/accessd 
>Website: http://www.databaseadvisors.com 
>
>
>  
>

-- 
Marty Connelly
Victoria, B.C.
Canada






More information about the AccessD mailing list