Board index » delphi » BDE can bypass MS Access security

BDE can bypass MS Access security

I'm trying to connect to an Access database with delphi 3. The DB was
created with access 95 and is protected by user-level security in
access. In particular, I've set the password for "Admin" and created
another account called "kent". Everything works fine in Access. But
in database explorer, when I try to open the alias, it will succeed
only when the user name is "Admin" and the password is empty (no other
user name & password combination works). Note that I've set a non-empty
password in Access for "Admin". After the alias is open, I can access
the tables as if I were really logged in as "Admin". How could this be
happening? What does the BDE do to bypass Access' security? How could
I avoid this?

TIA!

-----== Posted via Deja News, The Leader in Internet Discussion ==-----
http://www.dejanews.com/   Now offering spam-free web-based newsreading

 

Re:BDE can bypass MS Access security


Quote
>I'm trying to connect to an Access database with delphi 3. The DB was
>created with access 95 and is protected by user-level security in
>access. In particular, I've set the password for "Admin" and created
>another account called "kent". Everything works fine in Access. But
>in database explorer, when I try to open the alias, it will succeed
>only when the user name is "Admin" and the password is empty (no other
>user name & password combination works)

I belive you need the Delphi 3.01 update and BDE 4.51 to use password protected
tables in Access

--
Brian Bushay (TeamB)
Bbus...@DataGuidance.com

Re:BDE can bypass MS Access security


Hello,
 you may create a DATABASE component in the form (or in DATA MODULE) an set
the LOGIN PROMPT property to FALSE!!
If does not  work e-mail me

Gustavo Baratto
esta...@npd.ufes.br
NPD - UFES

freem...@macau.ctm.net escreveu na mensagem
<6j93nb$e9...@nnrp1.dejanews.com>...

Quote
>I'm trying to connect to an Access database with delphi 3. The DB was
>created with access 95 and is protected by user-level security in
>access. In particular, I've set the password for "Admin" and created
>another account called "kent". Everything works fine in Access. But
>in database explorer, when I try to open the alias, it will succeed
>only when the user name is "Admin" and the password is empty (no other
>user name & password combination works). Note that I've set a non-empty
>password in Access for "Admin". After the alias is open, I can access
>the tables as if I were really logged in as "Admin". How could this be
>happening? What does the BDE do to bypass Access' security? How could
>I avoid this?

>TIA!

>-----== Posted via Deja News, The Leader in Internet Discussion ==-----
>http://www.dejanews.com/   Now offering spam-free web-based newsreading

Other Threads