|
security
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Security Problem with Adobe 7.0(Users group does not have any permissions to view tables and I use RWOP queries). Everything was fine until one of my clients IT shops started installing Adobe 7.0 Professional on some of the machines. My PowerUsers group (not Admins group) is getting the exclusive message when they log in that they have to click through about 15 to 30 times. Now anyone reading this is going to say, it's the Adobe toolbar, just reinstall Adobe and don't click the option to have the Adobe toolbar install on Access. Won't work for my client because users have no administrative rights to Windows. The IT people (they're contractors) say they've done their job and are not going to reinstall Adobe 7.0. It works for all other software programs and they could care less about my Access program. OK, so I read a post where supposedly the real issue is that members of a group other than Admins might not have permissions to change the DB design. So I thought it was a read/design issue. I've tried increasing the rights my PowerUsers have. I've now given them all rights to administer every type of object including the DB and the error message still pops up. If this would have worked it is not really a problem for my database because I distribute a .mde file (which cannot be changed by anyone) and because I use custom toolbars depending upon the group the user belongs. So, I thought, if it's an Access design issue when Adobe tries to muscle its icons onto my toolbar, I'll just give PowerUsers all design rights, which they'll never be able to use because of the .mde file and custom toolbars. BUT IT DIDN'T WORK! And now I'm worried. I don't understand why it didn't work. Anybody in the Admins group who logs on does not get this message. But I can't just make everyone a member of the Admins group because they will now have access to a toolbar which they should not have any access to. Can someone please help me. Please remember, getting Adobe reinstalled is not an option and also remember that my users have no Windows administrator rights and cannot change the registry. Thanks for any help, suggestions,etc. -- Message posted via AccessMonster.com http://www.accessmonster.com/Uwe/Forums.aspx/access-security/200609/1 > Windows. The IT people (they're contractors) say they've done their -xxxxx- They have handed you a wooden nickel, and that's not their> job are not going to reinstall Adobe 7.0. It works for all other software problem? If they can't do their job properly, they should get out of business. And why should your company have to pay for something they should have warned you about before they did the work? Any way, the message is about 'exclusive access'. That means no shared mde, and they need to have the 'open exclusive' permission as well as db admin permission. It also means that they need read/write/modify/create/delete permission on the mde folder. Have you decided if it is an Access Permissions problem or a Windows Permissions problem? If you are logged into windows as one person, and log into the db as a different person, do you get the same problem? The only other suggestion I can think of is RWMCD permission on the MDW file Users are sometimes locked out of that. Menu stuff used to be in the MDW, but I only suggest that on the off chance that there might be something stupid going on. (david) "rdemyan via AccessMonster.com" <u6836@uwe> wrote in message news:664946b4b2e5c@uwe...Show quoteHide quote > I've implemented workgroup security and have Admins and PowerUsers group > (Users group does not have any permissions to view tables and I use RWOP > queries). > > Everything was fine until one of my clients IT shops started installing Adobe > 7.0 Professional on some of the machines. > > My PowerUsers group (not Admins group) is getting the exclusive message when > they log in that they have to click through about 15 to 30 times. > > Now anyone reading this is going to say, it's the Adobe toolbar, just > reinstall Adobe and don't click the option to have the Adobe toolbar install > on Access. > > Won't work for my client because users have no administrative rights to > Windows. The IT people (they're contractors) say they've done their job and > are not going to reinstall Adobe 7.0. It works for all other software > programs and they could care less about my Access program. > > OK, so I read a post where supposedly the real issue is that members of a > group other than Admins might not have permissions to change the DB design. > So I thought it was a read/design issue. I've tried increasing the rights my > PowerUsers have. I've now given them all rights to administer every type of > object including the DB and the error message still pops up. > > If this would have worked it is not really a problem for my database because > I distribute a .mde file (which cannot be changed by anyone) and because I > use custom toolbars depending upon the group the user belongs. > > So, I thought, if it's an Access design issue when Adobe tries to muscle its > icons onto my toolbar, I'll just give PowerUsers all design rights, which > they'll never be able to use because of the .mde file and custom toolbars. > > BUT IT DIDN'T WORK! And now I'm worried. I don't understand why it didn't > work. Anybody in the Admins group who logs on does not get this message. > But I can't just make everyone a member of the Admins group because they will > now have access to a toolbar which they should not have any access to. > > Can someone please help me. Please remember, getting Adobe reinstalled is > not an option and also remember that my users have no Windows administrator > rights and cannot change the registry. > > Thanks for any help, suggestions,etc. > > -- > Message posted via AccessMonster.com > http://www.accessmonster.com/Uwe/Forums.aspx/access-security/200609/1 > David,
Thanks for the response. It looks like the problem goes away if all of my users have Open Exclusive permission. Previously only Admins had this permission, not PowerUsers. That's why users in the Admins group never have the problem with Adobe 7.0. I only just discovered that I need to provide PowerUsers with the exclusiive access permission. In my attempts to solve the problem I have given the PowerUsers all other permissions that Admins have as well. I am planning to dial these "other" permissions (other than exclusive access) back since I don't really want the PowerUsers to have these permissions. I won't be on site till next week and I'll report back on exactly which permissions I had to provide to the PowerUsers group in order to make the Adobe 7.0 problem go away. How do you grant RWMCD permissons on the .mdw file. My custom toolbars only allow users in the Admins group to see my own custom form for creating/modifying, etc. users. I know they can get around it if they really want to, but I don't think any of them know how. Again, thanks for the response. david@epsomdotcomdotau wrote: Show quoteHide quote >> Windows. The IT people (they're contractors) say they've done their >> job are not going to reinstall Adobe 7.0. It works for all other software > >-xxxxx- They have handed you a wooden nickel, and that's not their >problem? If they can't do their job properly, they should get out of >business. And why should your company have to pay for something >they should have warned you about before they did the work? > >Any way, the message is about 'exclusive access'. That means no >shared mde, and they need to have the 'open exclusive' permission >as well as db admin permission. > >It also means that they need read/write/modify/create/delete permission >on the mde folder. > >Have you decided if it is an Access Permissions problem or a Windows >Permissions problem? If you are logged into windows as one person, >and log into the db as a different person, do you get the same problem? > >The only other suggestion I can think of is RWMCD permission on the >MDW file Users are sometimes locked out of that. Menu stuff used to be >in the MDW, but I only suggest that on the off chance that there might be >something stupid going on. > >(david) > >> I've implemented workgroup security and have Admins and PowerUsers group >> (Users group does not have any permissions to view tables and I use RWOP >[quoted text clipped - 39 lines] >> >> Thanks for any help, suggestions,etc. -- Message posted via AccessMonster.com http://www.accessmonster.com/Uwe/Forums.aspx/access-security/200609/1 I'm glad that you've fixed the problem. You may need to
also leave them with db admin permission (since some db properties can only be changed if you have db admin), but probably not required for this. (Note, db admin permission does not allow anyone to 'administer' the database. That is controlled by membership of the Admins group). Since you've fixed the problem, you don't need to play around with file permissions. Your mdw file permissions are correct. I only suggested that on the off chance that there was something strange going on, and I couldn't test here. (david) "rdemyan via AccessMonster.com" <u6836@uwe> wrote in message news:665b27c748c80@uwe...Show quoteHide quote > David, > > Thanks for the response. It looks like the problem goes away if all of my > users have Open Exclusive permission. Previously only Admins had this > permission, not PowerUsers. That's why users in the Admins group never have > the problem with Adobe 7.0. I only just discovered that I need to provide > PowerUsers with the exclusiive access permission. In my attempts to solve > the problem I have given the PowerUsers all other permissions that Admins > have as well. I am planning to dial these "other" permissions (other than > exclusive access) back since I don't really want the PowerUsers to have these > permissions. I won't be on site till next week and I'll report back on > exactly which permissions I had to provide to the PowerUsers group in order > to make the Adobe 7.0 problem go away. > > How do you grant RWMCD permissons on the .mdw file. My custom toolbars only > allow users in the Admins group to see my own custom form for > creating/modifying, etc. users. I know they can get around it if they really > want to, but I don't think any of them know how. > > Again, thanks for the response. > > david@epsomdotcomdotau wrote: > >> Windows. The IT people (they're contractors) say they've done their > >> job are not going to reinstall Adobe 7.0. It works for all other software > > > >-xxxxx- They have handed you a wooden nickel, and that's not their > >problem? If they can't do their job properly, they should get out of > >business. And why should your company have to pay for something > >they should have warned you about before they did the work? > > > >Any way, the message is about 'exclusive access'. That means no > >shared mde, and they need to have the 'open exclusive' permission > >as well as db admin permission. > > > >It also means that they need read/write/modify/create/delete permission > >on the mde folder. > > > >Have you decided if it is an Access Permissions problem or a Windows > >Permissions problem? If you are logged into windows as one person, > >and log into the db as a different person, do you get the same problem? > > > >The only other suggestion I can think of is RWMCD permission on the > >MDW file Users are sometimes locked out of that. Menu stuff used to be > >in the MDW, but I only suggest that on the off chance that there might be > >something stupid going on. > > > >(david) > > > >> I've implemented workgroup security and have Admins and PowerUsers group > >> (Users group does not have any permissions to view tables and I use RWOP > >[quoted text clipped - 39 lines] > >> > >> Thanks for any help, suggestions,etc. > > -- > Message posted via AccessMonster.com > http://www.accessmonster.com/Uwe/Forums.aspx/access-security/200609/1 > |
|||||||||||||||||||||||