SQL Select/Update Permissions by Column & Data Access Pages

[iodine131]

Hello,

I have a table in a testing environment where there are 3 columns of the following data type: char, bit, bit. I also have test users whom I have configured in enterprise manager with deny on one of the two bit columns based on login. The test users enter data into the table through a data access page on our intranet.

Data access page was created in access 2003 from data on our SQL server.

Pages data link connection properties are set to NT integrated security.

All users are able to update checkbox, regardless of user settings as far as column deny/grant settings.

This test is for a much larger table which has a similar mixed char and bit combination in the table. The final goal is to allow users from different departments to click the checkbox for their operation, and not be able to enter operations for other departments.

I am unsure if this is a SQL issue or and issue with the data access page not passing authentication data to the database properly. Any insight? Thanks 131

 

[fneily]

Maybe the discussion of security in:
Deploying Data Access Pages on the Internet or Your Intranet

http://msdn.microsoft.com/en-us/library/aa139939.aspx#deploydap_authentication

might help.

I usually just have a login DAP and depending on who it is, lock/unlock and make visible/invisible controls. No complaints from users so far.