VB in Word - Security risk via TS ?

[TheMac28nearly]

We are providing a solution for customers to logon and run an application that links into word for its documents. Is it a security risk leaving Visual Basic Editor installed and accessible as part of the word setup ? obviously they could run macros, but i need to weigh up the benefits and costs of deciding whether to have it there

Thanks

Andy

 

[SQLBI]

Andy,

A solution to this would be add a password to the VBA project. This would enable the code to run, but prevent unauthorised access to the code itself (Adding/Editing)

In the VBE, select Tools >....db Properties > Protection. Here you can lock the project from viewing and define your password.

Hope this helps.

Leigh Moore
Solutions 4 MS Office Ltd

http://www.solutions4msoffice.co.uk

 

[TheMac28nearly]

Cheers Leighmoore

would the password you are referring to protect the normal.doc?

Thanks

Andy

 

[SQLBI]

Andy,

For each Word document i think that there's a Normal element to the VBA project.

You can protect Normal, or the document or both if you wish.

Give it a try with a blank Word doc and see how you get on.

Leigh Moore
Solutions 4 MS Office Ltd

http://www.solutions4msoffice.co.uk

 

[TheMac28nearly]

Right, i think i know what you mean

when you talk about the code, are you talking about the functions of word itself, or the running of macros, or both !!!

I think i may be thinking that the VB editor is a little more dangerous in a TS environment than it actually is, without knowing too much about VB ?

Andy

 

[Dreamboat]

Andy:

Let's define something first. Have you installed the VBA components for MS Office?

Anne Troy

http://www.VBAExpress.com

 

[SQLBI]

Andy,

Listen to Anne, she knows her stuff... you could even buy her book!! thread68-692120





Leigh Moore
Solutions 4 MS Office Ltd

http://www.solutions4msoffice.co.uk

 

[TheMac28nearly]

Yeah, i read the thread, nice work Anne !!

Back to the subject though, i havent installed the VBA components specifically, im referring to the VB Editor that is under tools/macros. Ive had a look at what optional components are available in office/word and it doesnt appear to be an optional component

This is the first time ive thought about whether VB is a risk in a TS environment, so the question is, whether any of its a risk at all

Thanks

Andy

 

[Dreamboat]

No. You either install VBA or not, the Editor virtually IS the VBA component (interface). To keep people out of project work (VBA code you've written), you protect the code as mentioned above. To keep people from creating macros themselves is ludicrous, so don't go there okay? Or you have to go through Dreamy's spanking line...

See if that helps, or if you can ask your question more specifically.



Anne Troy

http://www.VBAExpress.com

 

[Dreamboat]

Hey, Leigh! Thanks for the vote of confidence there!

Have to be careful tho. My thread isn't really trying to sell my book (which would then be considered advertising), but to share my happiness about it with all here at tek-tips community who helped make that book possible.

If people start pointing to the thread and saying "buy the book", well...they might yank my thread. Wouldn't want that!

(But again--LOVE your enthusiasm about it!)

Anne Troy

http://www.VBAExpress.com

 

[TheMac28nearly]

I think youve answered my question, and i think i dont need to do anything!

basically i want as secure TS environment as poss, so i was looking at VB editor as a possible hole. Im still not sure whether you can execute any VB from it that could pose a possible security risk, but seeing as my only experience with the VB editor is with macros, and you say that its ludicrous to stop people doing this, then i guess my action is nothing ?

or is there something else that someone could do ?

 

[Dreamboat]

Basically, I could become a new employee for your company and come in there and write a macro in Word that'll open every Excel file and change all the values equal to 3 to be 4.

But, I'd still have to have rights and permissions to all those files, so it's not like VBA is gonna start side-stepping the usual...

(I don't know what a TS environment is. I'm no networking geek.)

I think, yes, you could just be expecting a leak where no known leaks exist.

Anne Troy

http://www.VBAExpress.com

 

[TheMac28nearly]

Id say you were right anne. There is only word on there from the office suite and another app, and if like you say, you cant side step the usual, then there should be no problem

i just dont know about VB and how it works with word (apart from macros)

Thanks for you help guys

Andy