Home All Groups Group Topic Archive Search About

Query Wizard Access

Author
4 Nov 2006 4:11 AM
AMN
Hi,
I have a user-level security access 2002 database with a frontend
forms/queries and backend tables.  I have closed the Database Window on
startup and disabled the toolbars for security.  I have a switchboard form on
startup as well.  One of my user groups has full Open/Run access to my linked
tables.  I have filters on my forms to prevent users accessing data I don't
want them to edit.  However, I would like this group to be able to open the
Database Window and create queries hopefully with the wizard.  However, I
want them to only be able to create and save read-only queries.  Is this
possible in any way?  As it stands, they can't create any queries unless I
make them part of the Admin group. 
Thank you,

Author
4 Nov 2006 1:43 PM
Joan Wild
You could remove all permissions from the tables.  Create RWOP queries for
all data interaction (read up on them in the security FAQ
http://support.microsoft.com/?id=207793 in the Security Whitepaper
http://support.microsoft.com/?id=148555 and at www.jmwild.com/RWOP.htm

Change the recordsources for forms/reports in the existing frontend to these
queries.

I would still lock down this frontend, as I assume that this user group
needs ability to edit/add data in the existing forms.  You'll need to grant
update permission on the RWOP queries.

For their adhoq querying, give them a second frontend, that contains links
to the backend, and a set of RWOP queries.  Set the permission on these
queries to Read Data only.  They'll need to use these queries rather than
the tables to create their own queries.


--
Joan Wild
Microsoft Access MVP

AMN wrote:
Show quoteHide quote
> Hi,
> I have a user-level security access 2002 database with a frontend
> forms/queries and backend tables.  I have closed the Database Window
> on startup and disabled the toolbars for security.  I have a
> switchboard form on startup as well.  One of my user groups has full
> Open/Run access to my linked tables.  I have filters on my forms to
> prevent users accessing data I don't want them to edit.  However, I
> would like this group to be able to open the Database Window and
> create queries hopefully with the wizard.  However, I want them to
> only be able to create and save read-only queries.  Is this possible
> in any way?  As it stands, they can't create any queries unless I
> make them part of the Admin group.
> Thank you,
Author
7 Nov 2006 11:31 PM
AMN
Thank you very much for your help. 

I will read up on these.



Show quoteHide quote
"Joan Wild" wrote:

> You could remove all permissions from the tables.  Create RWOP queries for
> all data interaction (read up on them in the security FAQ
> http://support.microsoft.com/?id=207793 in the Security Whitepaper
> http://support.microsoft.com/?id=148555 and at www.jmwild.com/RWOP.htm
>
> Change the recordsources for forms/reports in the existing frontend to these
> queries.
>
> I would still lock down this frontend, as I assume that this user group
> needs ability to edit/add data in the existing forms.  You'll need to grant
> update permission on the RWOP queries.
>
> For their adhoq querying, give them a second frontend, that contains links
> to the backend, and a set of RWOP queries.  Set the permission on these
> queries to Read Data only.  They'll need to use these queries rather than
> the tables to create their own queries.
>
>
> --
> Joan Wild
> Microsoft Access MVP
>
> AMN wrote:
> > Hi,
> > I have a user-level security access 2002 database with a frontend
> > forms/queries and backend tables.  I have closed the Database Window
> > on startup and disabled the toolbars for security.  I have a
> > switchboard form on startup as well.  One of my user groups has full
> > Open/Run access to my linked tables.  I have filters on my forms to
> > prevent users accessing data I don't want them to edit.  However, I
> > would like this group to be able to open the Database Window and
> > create queries hopefully with the wizard.  However, I want them to
> > only be able to create and save read-only queries.  Is this possible
> > in any way?  As it stands, they can't create any queries unless I
> > make them part of the Admin group.
> > Thank you,
>
>
>