Making specific records secure

[mattpearcey]

I have a security problem that i am having problems coming up with an answer for.

My database is set up using a Backend with 5 Frontends, all filters specifically for the regional area. Eg. I have a MiddleEast Frontend for people in the Middle East, and a CIS/Baltics Frontend for those in the CIS. They all access these frontends through a citrix environment, as they have been published as citirx applications. Therefore the security is within that. Thus i did not need to use any access security features.

It is mainly a marketing database with many records of Banks for each region. I have now had a request to add a sales element to this. However, I need to secure individual records within these frontends now. I am unsure how to do this. At present, all those in each specific region can see all, but only there banks in there region. But now i want them to be able to do the same, but, where there is specific sales information on that bank (a seperate form that i have built in) that in concerning them, they must enter their username and password. So, this means that each sales person can only see their own prospects, and no-one elses. But, with other users( of top level status) can view all. So an overriding username and password.

Is this possible?

I don't particularly want to get into the tangle of access security, so through that there could be some coding that could be done to make this happen.

I have a sales person field, that is a combo. So if there was a way in which this determined a password needing to enter the record, then that would be great. As long as there was an overriding password for the Sales Managment and Marketing administrators.

Or, is there another way around this in terms of the structure of how i can build these new features.

Hope someone can help, or at least offer some advice!

Regards

Matt Thank you for your help already.

Matt Pearcey

 

[KUZZ]

here is my story,

I am administering a manufacturing database. It contains parts , assemblies , products, as well as buildlists, and additional info on assembly of assemblies and products above.

Currently i have 3 users: myself, one in machinning, one in assembly.

For each of them until recently the DB was read only. they could only see whatever they want, but no editing. Now the need for editing has arisen, basically changes i need the user in machinning - is regarding machine setup info, and for the user in assembly - is regarding buildlists.

I gave them in acces security permissions to users to add/edit data (no deletes though) to 2 tables behind the 2 forms, generally used by the 2 users. In the meanwhile - i want the users to not be able to even edit some of the info on their forms, but they can, because they have table edit permissions.

here is how i solved this issue, i went to each and every controly that i do not want changed and locked it for specific user.

on current for controls I want uneditable I have the following:

if currentuser<>&quot;admin&quot;
[controlX].locked=true
else
[controlX].locked=false
end if

on current for controls I want editable there is no lock

Now you could have it done in many different ways.

If you have separate users - currentuser brings the name of the user logged into one specific frontend.

you could use the stuff above directly, or you could
set a control that if user logged in is
Dan, Jane, Paul, Mark - it will show Sales
and then the functions from above could look something like
if [DEPT]=sales
[CONTROLX].locked=true
else
[CONTROLX].locked=false
end if

i hope you get the idea
REGARDS, KUZZ

LIFE IS GREAT WHEN THERE IS SOMEONE TO HELP YOU.
DESIGNING DATABASES SINCE 2002