Wrox Home  
Search P2P Archive for: Go

  Return to Index  

access thread: Permissions help


Message #1 by gail711@g... on Fri, 22 Mar 2002 10:44:07
Does anyone know of any way to get access to a database to make changes if 
you don't know the admin password?
Message #2 by joe.dunn@c... on Fri, 22 Mar 2002 11:08:47 +0000
Other than buying a 3rd party product, you cannot retrieve a password.

Woody's Office Watch usually carries an advert such as:



   >> Recover your IMPORTANT Office files at www.OfficeRecovery.com <<

    Data recovery for Word, Excel, PowerPoint, Access, Exchange files.

     ** Click http://www.OfficeRecovery.com for a FREE demo **

Joe Dunn



                                                                                         
                    gail711@g...                                                        
                    m                    To:     "Access" <access@p...>          
                                         cc:                                             
                    22/03/2002           Subject:     [access] Permissions help          
                    10:44                                                                
                    Please                                                               
                    respond to                                                           
                    "Access"                                                             
                                                                                         
                                                                                         




Does anyone know of any way to get access to a database to make changes if
you don't know the admin password?



*************************************************************************

This e-mail may contain confidential information or be privileged. It is intended to be read and used only by the named
recipient(s). If you are not the intended recipient(s) please notify us immediately so that we can make arrangements for its return:
you should not disclose the contents of this e-mail to any other person, or take any copies. Unless stated otherwise by an
authorised individual, nothing contained in this e-mail is intended to create binding legal obligations between us and opinions
expressed are those of the individual author.

The CIS marketing group, which is regulated for Investment Business by the Financial Services Authority, includes:
Co-operative Insurance Society Limited Registered in England number 3615R - for life assurance and pensions
CIS Unit Managers Limited Registered in England and Wales number 2369965  - for unit trusts and PEPs
CIS Policyholder Services Limited Registered in England and Wales number 3390839 - for ISAs and investment products bearing the CIS
name
Registered offices: Miller Street, Manchester M60 0AL   Telephone  0161-832-8686   Internet  http://www.cis.co.uk   E-mail
cis@c...

CIS Deposit and Instant Access Savings Accounts are held with The Co-operative Bank p.l.c., registered in England and Wales number
990937, P.O. Box 101, 1 Balloon Street, Manchester M60 4EP, and administered by CIS Policyholder Services Limited as agent of the
Bank.

CIS is a member of the General Insurance Standards Council

CIS & the CIS logo (R) Co-operative Insurance Society Limited

********************************************************************************
Message #3 by Richard Gibson <rgibson@W...> on Fri, 22 Mar 2002 12:15:42 -0000
Are you using access security?

if so there is a way around it.  Access creates a workgroup file which holds
the security data.  You can replace that file with one from another database
that has no security and hey presto!

Now I don't know the exact details of this but I understand it is fairly
easy - hence Access being a less than secure option for data storage.

Anyone have a better grasp of this?

-----Original Message-----
From: gail711@g... [mailto:gail711@g...]
Sent: 22 March 2002 10:44
To: Access
Subject: [access] Permissions help


Does anyone know of any way to get access to a database to make changes if 
you don't know the admin password?
Message #4 by brian.skelton@b... on Fri, 22 Mar 2002 12:48:22
If the designer has done it correctly this will not work.

It will work if the designer has just added a password to the default user 
account. If they have actually removed all object permissions for the 
default account, then no matter which workgroup file you use you still 
will not have permission to open the database.

The Access security scheme is actually quite secure if it's used correctly!

Brian

> Are you using access security?

if so there is a way around it.  Access creates a workgroup file which 
holds
the security data.  You can replace that file with one from another 
database
that has no security and hey presto!

Now I don't know the exact details of this but I understand it is fairly
easy - hence Access being a less than secure option for data storage.

Anyone have a better grasp of this?

-----Original Message-----
From: gail711@g... [mailto:gail711@g...]
Sent: 22 March 2002 10:44
To: Access
Subject: [access] Permissions help


Does anyone know of any way to get access to a database to make changes if 
you don't know the admin password?
Message #5 by joe.dunn@c... on Fri, 22 Mar 2002 12:53:55 +0000
If you have simply created logons without defining permissions by
group/user, this will work.

However, my recommendation is that you never do that because then you are
creating 'a less than secure option'. You should always define specific
permissions to prevent somebody doing just what Richard Gibson suggests.

When permissions are defined, the security model resides partly in the
database and partly in the workgroup file - then you cannot just swop a
workgroup file!

Joe



                                                                                            
                    Richard Gibson                                                          
                    <rgibson@W...        To:     "Access" <access@p...>          
                    ACK.co.uk>              cc:                                             
                                            Subject:     [access] RE: Permissions help      
                    22/03/2002 12:15                                                        
                    Please respond                                                          
                    to "Access"                                                             
                                                                                            
                                                                                            




Are you using access security?

if so there is a way around it.  Access creates a workgroup file which
holds
the security data.  You can replace that file with one from another
database
that has no security and hey presto!

Now I don't know the exact details of this but I understand it is fairly
easy - hence Access being a less than secure option for data storage.

Anyone have a better grasp of this?

-----Original Message-----
From: gail711@g... [mailto:gail711@g...]
Sent: 22 March 2002 10:44
To: Access
Subject: [access] Permissions help


Does anyone know of any way to get access to a database to make changes if
you don't know the admin password?




*************************************************************************

This e-mail may contain confidential information or be privileged. It is intended to be read and used only by the named
recipient(s). If you are not the intended recipient(s) please notify us immediately so that we can make arrangements for its return:
you should not disclose the contents of this e-mail to any other person, or take any copies. Unless stated otherwise by an
authorised individual, nothing contained in this e-mail is intended to create binding legal obligations between us and opinions
expressed are those of the individual author.

The CIS marketing group, which is regulated for Investment Business by the Financial Services Authority, includes:
Co-operative Insurance Society Limited Registered in England number 3615R - for life assurance and pensions
CIS Unit Managers Limited Registered in England and Wales number 2369965  - for unit trusts and PEPs
CIS Policyholder Services Limited Registered in England and Wales number 3390839 - for ISAs and investment products bearing the CIS
name
Registered offices: Miller Street, Manchester M60 0AL   Telephone  0161-832-8686   Internet  http://www.cis.co.uk   E-mail
cis@c...

CIS Deposit and Instant Access Savings Accounts are held with The Co-operative Bank p.l.c., registered in England and Wales number
990937, P.O. Box 101, 1 Balloon Street, Manchester M60 4EP, and administered by CIS Policyholder Services Limited as agent of the
Bank.

CIS is a member of the General Insurance Standards Council

CIS & the CIS logo (R) Co-operative Insurance Society Limited

********************************************************************************
Message #6 by "Paul McLaren" <paulmcl@t...> on Fri, 22 Mar 2002 01:51:39 -0000
Hi,

My grasp on Access 'in built' security is don't bother - design your own
security routines and code them into the forms etc.  

There are loads of options available by using various properties -
locked, visible, enable etc and activating them by referencing some sort
of bespoke logon form.

I did post a large mail a month or two back on how to I would set about
securing a database.

If you are interested I can look out a copy (if I still have it - anyone
else got it in an mail archive somewhere?)

Regards

Paul

-----Original Message-----
From: Richard Gibson [mailto:rgibson@W...] 
Sent: 22 March 2002 12:16
To: Access
Subject: [access] RE: Permissions help

Are you using access security?

if so there is a way around it.  Access creates a workgroup file which
holds
the security data.  You can replace that file with one from another
database
that has no security and hey presto!

Now I don't know the exact details of this but I understand it is fairly
easy - hence Access being a less than secure option for data storage.

Anyone have a better grasp of this?

-----Original Message-----
From: gail711@g... [mailto:gail711@g...]
Sent: 22 March 2002 10:44
To: Access
Subject: [access] Permissions help


Does anyone know of any way to get access to a database to make changes
if 
you don't know the admin password?



Message #7 by gail711@g... on Mon, 25 Mar 2002 15:44:42
Paul
  I would be interested in seeing a copy of your post.  As far as the 
replies to my original post, actual permissions etc have been set, but 
wrongly.  There doesn't seem to be any kind of admin rights to anything.  
Am trying the easy way of getting in touch with the guy who wrote it 
(hopefully he gave himself admin rights)
Thanks for the suggestions
Gail

> Hi,

My grasp on Access 'in built' security is don't bother - design your own
security routines and code them into the forms etc.  

There are loads of options available by using various properties -
locked, visible, enable etc and activating them by referencing some sort
of bespoke logon form.

I did post a large mail a month or two back on how to I would set about
securing a database.

If you are interested I can look out a copy (if I still have it - anyone
else got it in an mail archive somewhere?)

Regards

Paul

-----Original Message-----
From: Richard Gibson [mailto:rgibson@W...] 
Sent: 22 March 2002 12:16
To: Access
Subject: [access] RE: Permissions help

Are you using access security?

if so there is a way around it.  Access creates a workgroup file which
holds
the security data.  You can replace that file with one from another
database
that has no security and hey presto!

Now I don't know the exact details of this but I understand it is fairly
easy - hence Access being a less than secure option for data storage.

Anyone have a better grasp of this?

-----Original Message-----
From: gail711@g... [mailto:gail711@g...]
Sent: 22 March 2002 10:44
To: Access
Subject: [access] Permissions help


Does anyone know of any way to get access to a database to make changes
if 
you don't know the admin password?



Message #8 by "Paul McLaren" <paulmcl@t...> on Mon, 25 Mar 2002 18:31:42 -0000
Gail,

There should be a way round it - it basically involves replacing the MDW
file (I think) with another one and the existing rights are removed.  

Can anyone advise Gail on the exact way to do this as I have never used
it in depth?

I am looking for the original mail I posted - I don't have a copy
locally on my PC, I think if I remember it went to Stephen Carpenter but
I may be wrong.

Stephen are you out there and can help?

Regards

Paul

-----Original Message-----
From: gail711@g... [mailto:gail711@g...] 
Sent: 25 March 2002 15:45
To: Access
Subject: [access] RE: Permissions help

Paul
  I would be interested in seeing a copy of your post.  As far as the 
replies to my original post, actual permissions etc have been set, but 
wrongly.  There doesn't seem to be any kind of admin rights to anything.

Am trying the easy way of getting in touch with the guy who wrote it 
(hopefully he gave himself admin rights)
Thanks for the suggestions
Gail

> Hi,

My grasp on Access 'in built' security is don't bother - design your own
security routines and code them into the forms etc.  

There are loads of options available by using various properties -
locked, visible, enable etc and activating them by referencing some sort
of bespoke logon form.

I did post a large mail a month or two back on how to I would set about
securing a database.

If you are interested I can look out a copy (if I still have it - anyone
else got it in an mail archive somewhere?)

Regards

Paul

-----Original Message-----
From: Richard Gibson [mailto:rgibson@W...] 
Sent: 22 March 2002 12:16
To: Access
Subject: [access] RE: Permissions help

Are you using access security?

if so there is a way around it.  Access creates a workgroup file which
holds
the security data.  You can replace that file with one from another
database
that has no security and hey presto!

Now I don't know the exact details of this but I understand it is fairly
easy - hence Access being a less than secure option for data storage.

Anyone have a better grasp of this?

-----Original Message-----
From: gail711@g... [mailto:gail711@g...]
Sent: 22 March 2002 10:44
To: Access
Subject: [access] Permissions help


Does anyone know of any way to get access to a database to make changes
if 
you don't know the admin password?





Message #9 by Barry Dancis <bdancis@c...> on Mon, 25 Mar 2002 16:11:26 -0500
Hi Gail--

    Below are the notes on Security from a demo I gave at the Philadelphia
Area Computer Society last Saturday.

    I use a shortcut to open the database. The shortcut includes the path to
the database and the mdw file
    Most of my info came from the access help files associated with Security
and then I still had to play around and try different things before I got
what I wanted.

    I also created a shortcut to wrkadm.exe, the program that creates and
edits work groups, and placed it on the desk top while I was working out all
the bugs because I was running the program so often.

    Most importantly, users must be required to log in to the access
database and then during start up check CurrentUser (access function)
against a user defined table of people allowed to log in. If the name isn't
found, then exit the program. Note that you will either have to have an
entry for Admin in the table, or the code that checks the table will have to
first check if the user is Admin and then not check the table.

    Make sure you change the password of ADMIN from "" (default) to some
other value

    I hope this helps.

Barry

p.s. comments and improvements to the outline below greatly appreciated

p.p.s. Access contract work appreciated even more
Barry Dancis Consulting, Inc.
bdancis@c...
xxx-xxx-xxxx
============================================================================

Security
    Create MS Access workgroup
         Exit Access
         Start workgroup administrator (Windows\system\wrkadm.exe or
Windows\system32\wrkadm.exe)
        Click Create
        Enter values - record in safe place other than the database - values
are case sensitive
    Create shortcut to open database and use the specified workgroup;
        Target: "C:\Program Files\Microsoft Office\Office\MSACCESS.EXE"
"put file name of access db here" /wrkgrp "put file name of mdw file here"
    Change Database password
        Probably not a good idea to use except for single copy and at most a
few users - it prevents replicating databases from synchronizing
        Open db for exclusive use - menu file\open - select db, check
Exclusive box
        Menu tools\security\set database password.
        Enter new password
    User-Level Security
        Login as a dba (e.g. Admin)
        At least 3 groups: Admin, Mangers, Users
        Add mangers
            Menu tools\security\User and Group Accounts.
            Click Group tag, New button
            Type in value and personal id - Managers, "put manager group
personal id here"
        Give user a manager's privileges
            Click Users tab
            Select a user who should have manager privileges:
            Select Managers from list of available groups on left
            Click ">>" button
        Add new user
            Click "New" button on Users tab
            Enter name and personal id
            Click ok
            Close down access
            Change user password
                Login as new user - leave password blank
                Menu tools\security\User and Group Accounts.
                Change Logon Password tab (should show name of user who just
logged in)
                Enter temporary password - real user can change it at a
later time
                Click ok
        User forgets password
            Login as admin
            Open Menu tools\security\User and Group Accounts.
            Select name of user who forgot password
            Click Clear Password button
            Change user password as above
    Change User permissions
       Grant permissions by memberships in groups - not individually
        Menu tools\security\User and Group Permissions.
        Permissions Tab, click Group radio button
        Determine permissions for each table

----- Original Message -----
From: "Paul McLaren" <paulmcl@t...>
To: "Access" <access@p...>
Sent: Monday, March 25, 2002 1:31 PM
Subject: [access] RE: Permissions help


> Gail,
>
> There should be a way round it - it basically involves replacing the MDW
> file (I think) with another one and the existing rights are removed.
>
> Can anyone advise Gail on the exact way to do this as I have never used
> it in depth?
>
> I am looking for the original mail I posted - I don't have a copy
> locally on my PC, I think if I remember it went to Stephen Carpenter but
> I may be wrong.
>
> Stephen are you out there and can help?
>
> Regards
>
> Paul
>
> -----Original Message-----
> From: gail711@g... [mailto:gail711@g...]
> Sent: 25 March 2002 15:45
> To: Access
> Subject: [access] RE: Permissions help
>
> Paul
>   I would be interested in seeing a copy of your post.  As far as the
> replies to my original post, actual permissions etc have been set, but
> wrongly.  There doesn't seem to be any kind of admin rights to anything.
>
> Am trying the easy way of getting in touch with the guy who wrote it
> (hopefully he gave himself admin rights)
> Thanks for the suggestions
> Gail
>
> > Hi,
>
> My grasp on Access 'in built' security is don't bother - design your own
> security routines and code them into the forms etc.
>
> There are loads of options available by using various properties -
> locked, visible, enable etc and activating them by referencing some sort
> of bespoke logon form.
>
> I did post a large mail a month or two back on how to I would set about
> securing a database.
>
> If you are interested I can look out a copy (if I still have it - anyone
> else got it in an mail archive somewhere?)
>
> Regards
>
> Paul
>
> -----Original Message-----
> From: Richard Gibson [mailto:rgibson@W...]
> Sent: 22 March 2002 12:16
> To: Access
> Subject: [access] RE: Permissions help
>
> Are you using access security?
>
> if so there is a way around it.  Access creates a workgroup file which
> holds
> the security data.  You can replace that file with one from another
> database
> that has no security and hey presto!
>
> Now I don't know the exact details of this but I understand it is fairly
> easy - hence Access being a less than secure option for data storage.
>
> Anyone have a better grasp of this?
>
> -----Original Message-----
> From: gail711@g... [mailto:gail711@g...]
> Sent: 22 March 2002 10:44
> To: Access
> Subject: [access] Permissions help
>
>
> Does anyone know of any way to get access to a database to make changes
> if
> you don't know the admin password?
>
>
>
>
>
>
>

Message #10 by gail711@g... on Tue, 26 Mar 2002 10:38:40
Ok, i think maybe i should explain the problem a bit better.  I have been 
given a database that needs changes made to several forms/reports.  The 
person who wrote it set up an mdw, made groups/users etc and assigned 
permissions.  At the moment the only way to use the thing is as a user in 
the reader/writer group.  These people do not have any admin type 
permission.  There are 3 users listed in the security details that are in 
the admin group.  I logged in as one of these users (luckily their 
password was blank) but it said i didn't even have permissions to run the 
database.  This makes me think the admin group wasn't set up with the 
right permissions (something i obviously can't check).  At the moment my 
main hope is that the guy who wrote it can remember his password and gave 
himself admin rights, but if that fails then?
I have tried opening it through another mdw but it won't work.
Is that any clearer?
Message #11 by brian.skelton@b... on Tue, 26 Mar 2002 12:17:19
In this case your ONLY hope is that the designer can remember the username 
& password he used whilst building the database.

This username will have Owner rights to the database, which gives 
permissions for all objects.

The third party software that someone mentioned can only be used to 
recover a database password. I'm almost certain there is nothing out there 
that will work with user level security.

Brian

> Ok, i think maybe i should explain the problem a bit better.  I have 
been 
g> iven a database that needs changes made to several forms/reports.  The 
p> erson who wrote it set up an mdw, made groups/users etc and assigned 
p> ermissions.  At the moment the only way to use the thing is as a user 
in 
t> he reader/writer group.  These people do not have any admin type 
p> ermission.  There are 3 users listed in the security details that are 
in 
t> he admin group.  I logged in as one of these users (luckily their 
p> assword was blank) but it said i didn't even have permissions to run 
the 
d> atabase.  This makes me think the admin group wasn't set up with the 
r> ight permissions (something i obviously can't check).  At the moment my 
m> ain hope is that the guy who wrote it can remember his password and 
gave 
h> imself admin rights, but if that fails then?
I>  have tried opening it through another mdw but it won't work.
I> s that any clearer?

  Return to Index