Hi,
This is what I want to do: A database based on Delphi 6, ADO and JET 4.0
(Access 2000 files) hosted in a small network (3-15 users) on a W2000 NTFS
file server (no client/server).
The database should have row-level security, that is, I need to keep track
of who can see what records and who can edit it and so on.
What I thought was to stora a table of user rights connected to the main
data table. Then when I show the data I can check who the user is (checking
W2000 user groups with the shareware NTSet component for example), and then
check my database to see if that user is allowed to see that record.
1. But.... how can I secure the files on the server from someone deleting
them, or reading them with ACCESS driectly?
(I have made a .MDW file setting up user rights in JET, but I have to allow
reading of the whole tables, my only hope is that there is some way to only
allow my application and no other to access the files... at least not MS
Access (security has to be OK, not perfect))
2. And... will this user group checking stuff be possible from a W98
computer connected to the network?
(Then the smaller problem of what to do when the administrator changes user
groups on the server etc...and I have stored group connected access rights
in my databse...)
Next issue:
Every record in the database will also store information about related
external documents (.DOC for example, that will be stored in a special
sub-directory on the server). I will give the user the option of opening
these documents with a "default browser" from my application.
Now... these documents should also be secured like the records in the
databae, that is, the wrong user should not be able to delete, edit or even
look inside the wrong file with WORD for example, and preferrably not see
them in a directory.
This could be done through setting file security fro each document in W2000
(with the NTSet component for example) when the document is stored on the
server from my application (at the time that the "connected" database record
is created and I set its user group rights, the user is allowed to "uppload"
external documents for that record, so I set the documents group access
rights too)
3. But, will this work on the files on the W2000 file server from a W98
client?
4. Any other suggestions to how I should solve this?!?
(I dont want to store all the documents in the databse because it will be
many many GB....)
Tnx
Piedro Mazolo
