[AccessD] Access 2013 -- MDB Back Ends Dead?

Charlotte Foust charlotte.foust at gmail.com
Tue Jul 24 08:53:57 CDT 2012


Maybe I'm missing something, but it doesn't seem like the two concepts are
mutually exclusive.  Roles are created on the database side and users log
into those roles through the FE login.  Or is the assumption that the
database roles will be individually assigned based on network login?

Charlotte

On Tue, Jul 24, 2012 at 5:45 AM, Arthur Fuller <fuller.artful at gmail.com>wrote:

> I think that I disagree on that point, JC. I much prefer to assign users to
> Roles on the database level. I have even found that Roles are additive, or
> perhaps cumulative is a better word. For example, within a given database,
> you could create a Role called Sales, with just enough rights to create new
> sales orders and look up existing sales. Above that, you could have another
> Role called SalesManager, with all the Sales rights and some additional
> ones such as the ability to view the performance reports on all Sales
> people. And above that, a SeniorManagement Role that can do everything
> Sales and SalesManager can do, plus some additional stuff.
>
> The main reason I like to do it this way is
>
> In a multi-company scenario, Company A's Roles could be restricted
> completely to that company's database, and similarly for Companies B and C.
>
> And meanwhile, godlike being that you are, you can do Anything.
>
> A.
>
> On Mon, Jul 23, 2012 at 9:07 PM, jwcolby <jwcolby at colbyconsulting.com
> >wrote:
>
> > Not so fun however when you are giving unknown / barely known users /
> > machines access to your business server.  Better to have an Access Fe
> > installed on the user's machine coming in under a single SQL Server user
> /
> > group which is precisely controlled what it is allowed to do.
> >
> >
> >
> --
> AccessD mailing list
> AccessD at databaseadvisors.com
> http://databaseadvisors.com/mailman/listinfo/accessd
>
>
> Website: http://www.databaseadvisors.com
>
>
>


More information about the AccessD mailing list