Whare are permissions stored?

22 Sep 2006 1:18 PM

Not_A_Real_Programmer

In a split db, where are group permissions actually stored -- in the .mdw
file or in the FE? I keep setting group permissions and they keep changing.

22 Sep 2006 1:31 PM

Rick Brandt

Not_A_Real_Programmer wrote:

> In a split db, where are group permissions actually stored -- in the
> .mdw file or in the FE? I keep setting group permissions and they
> keep changing.

In a split app (all apps actually) the MDW holds account info and group
memberships of accounts. The front end holds the permissions to objects in
the front end file and the back end holds the permissions to the back end
objects.

--
Rick Brandt, Microsoft Access MVP
Email (as appropriate) to...
RBrandt at Hunter dot com

22 Sep 2006 2:34 PM

Not_A_Real_Programmer

I am "losing" permissions on certain forms. It sounds as though the problem
would be with the FE, somehow.

Show quoteHide quote

"Rick Brandt" wrote:

> Not_A_Real_Programmer wrote:
> > In a split db, where are group permissions actually stored -- in the
> > .mdw file or in the FE? I keep setting group permissions and they
> > keep changing.
>
> In a split app (all apps actually) the MDW holds account info and group
> memberships of accounts. The front end holds the permissions to objects in
> the front end file and the back end holds the permissions to the back end
> objects.
>
> --
> Rick Brandt, Microsoft Access MVP
> Email (as appropriate) to...
> RBrandt at Hunter dot com
>
>
>

22 Sep 2006 3:07 PM

Rick Brandt

Not_A_Real_Programmer wrote:

> I am "losing" permissions on certain forms. It sounds as though the
> problem would be with the FE, somehow.
>
> "Rick Brandt" wrote:

Never heard of that happening.

Are you granting permissions to individual users or only to groups? The
latter is MUCH simpler to manage. Do you give each user their own copy of
the MDW file or is everyone using a shared copy. The latter is better in
this case too, but it is virtually required if you grant permissions to
individual users.

--
Rick Brandt, Microsoft Access MVP
Email (as appropriate) to...
RBrandt at Hunter dot com

22 Sep 2006 3:34 PM

Joan Wild

How are you determining that permissions are getting lost? Remember that if
you grant permissions to groups, and make users members of that group, those
are called implicit permissions. When you look in the security permission
dialogs for a user, those permissions won't show. They will show for the
group, though.

The only way that permissions could get lost, is if you import an object
from another database - permissions don't travel with an import/export.

--
Joan Wild
Microsoft Access MVP

Not_A_Real_Programmer wrote:

Show quoteHide quote

> I am "losing" permissions on certain forms. It sounds as though the
> problem would be with the FE, somehow.
>
> "Rick Brandt" wrote:
>
>> Not_A_Real_Programmer wrote:
>>> In a split db, where are group permissions actually stored -- in the
>>> .mdw file or in the FE? I keep setting group permissions and they
>>> keep changing.
>>
>> In a split app (all apps actually) the MDW holds account info and
>> group memberships of accounts. The front end holds the permissions
>> to objects in the front end file and the back end holds the
>> permissions to the back end objects.
>>
>> --
>> Rick Brandt, Microsoft Access MVP
>> Email (as appropriate) to...
>> RBrandt at Hunter dot com

22 Sep 2006 4:21 PM

Not_A_Real_Programmer

I think I may have figured this out. If I have, I feel REALLY, REALLY dumb.
The dbs are on a server, and we started using Tony's Auto FE Updater about
three months ago. The permissions are set by group, not user. I haven't had
an .mdw file on my development area, so I've been resetting the permissions
on the server with the icon that starts the Auto FE Updater. That means that
I've been setting the permissions on the FE copy on the workstation in the
user's profile. I just linked an .mdw to my development FE, changed
permissions, and then copied that FE in a test environment. I'll put the FE
with the correct permissions on one of the real sites, but I'm pretty sure
that's the problem. It really explains why I could "fix" the permissions on
a user's profile and they would stay "fixed" until I deleted the user's
profile. DUUHHH! I've always set permissions directly on the server, but
everyone was pointing to the save FE until we implemented the Auto FE
Updater. Thank you, Rick and Joan, for responding to this issue over which
I've lost a lot of sleep. If there are flaws in my current perception,
please let me know. I think I've lost about any confidence I had.

22 Sep 2006 7:00 PM

Joan Wild

Yes, you should be making changes/testing in your copy of the frontend, and
once ready, deploy it.

--
Joan Wild
Microsoft Access MVP

Not_A_Real_Programmer wrote:

Show quoteHide quote

> I think I may have figured this out. If I have, I feel REALLY,
> REALLY dumb. The dbs are on a server, and we started using Tony's
> Auto FE Updater about three months ago. The permissions are set by
> group, not user. I haven't had an .mdw file on my development area,
> so I've been resetting the permissions on the server with the icon
> that starts the Auto FE Updater. That means that I've been setting
> the permissions on the FE copy on the workstation in the user's
> profile. I just linked an .mdw to my development FE, changed
> permissions, and then copied that FE in a test environment. I'll put
> the FE with the correct permissions on one of the real sites, but I'm
> pretty sure that's the problem. It really explains why I could "fix"
> the permissions on a user's profile and they would stay "fixed" until
> I deleted the user's profile. DUUHHH! I've always set permissions
> directly on the server, but everyone was pointing to the save FE
> until we implemented the Auto FE Updater. Thank you, Rick and Joan,
> for responding to this issue over which I've lost a lot of sleep. If
> there are flaws in my current perception, please let me know. I
> think I've lost about any confidence I had.