Home All Groups Group Topic Archive Search About

Make a table contents unviewable

Author
25 Oct 2005 8:38 PM
Bill M
I have some sensitive data stored in a table (IE: pricelists, credit card
numbers) and need a way to ensure that no one can view the contents of this
table.  I know you can hide the table, but that is easy to get around.  It
also seems that user-level security still permits a table's contents to be
viewed.

What is the best way to secure sensitive data?

Author
26 Oct 2005 2:22 AM
TC
You are on very slippery ground storing CC numbers in an Access
database. The security is not 100%, it can be cracked with products
that are available on the web. What will you do when an unauthorized
person takes a copy of the database & gets at all the CC numbers?

Here's a different approach. /Encrypt/ the CC numbers using a suitable
cipher. Then, you do not care whether people can view them in the
table; they will only be able to see the encrypted (unusable) values.
Decrypt each number (as you use it) in your query, form, report &
module code. Make the database an MDE, so no-one can view the code to
see what encryption keys you are using.

HTH,
TC