ACC2000: Converting to Access 97 Creates Unsecured Database

ID: Q198986

The information in this article applies to:
Moderate: Requires basic macro, coding, and interoperability skills.

This article applies only to a Microsoft Access database (.mdb).


SYMPTOMS

When you convert a secured Microsoft Access 2000 database to Microsoft Access 97 format, the newly created Microsoft Access 97 database is unsecured. That is, permissions are reset to their defaults in the newly created Microsoft Access 97 database. This occurs because Microsoft Access 2000 uses a new workgroup file that is not readable by Microsoft Access 97; therefore, permissions on objects in the new database are reset.

NOTE: The permissions on the source Microsoft Access 2000 database are not affected. This behavior does not constitute a security breach because the user performing the Save As action must have read design permissions on all objects, and must know the Visual Basic for Applications project password (if one exists) in order to perform the conversion process. If someone already has read design permissions on all objects and knows the Visual Basic for Applications project password in Microsoft Access 2000, then they already have the ability to view the design of the objects.


RESOLUTION

If you want to have a secured version of the Microsoft Access 97 database, the database administrator must resecure the database in Microsoft Access 97.


MORE INFORMATION

Steps to Reproduce Behavior:

  1. Start Microsoft Access 2000. In the Microsoft Access dialog box, click Blank Access database, and then click OK.


  2. In the Save in box, select a folder to which to save the new database, and then click Create.


  3. In the Database window, click Forms under Objects.


  4. Click New, click Design View, and then click OK.


  5. On the File menu, click Save and in the Save As box type OpenMe. Click OK.


  6. On the File menu, click Close.


  7. On the Tools menu, point to Security, and then click User and Group Accounts.


  8. Click the Change Logon Password tab.


  9. Type Admin in the New Password and Verify text boxes, and then click Apply.


  10. Click the Users tab.


  11. Click New, and in the Name box, type test.


  12. In the Personal ID box, type test1, and then click OK.


  13. Click OK to close the User and Groups Accounts dialog box.


  14. On the Tools menu, point to Security, and then click User and Group Permissions.


  15. On the Permissions tab, click the Groups option to show the Users group.


  16. Click the Users group, and then click Form under Object Type.


  17. Under Object Name, click OpenMe.


  18. Under Permissions, clear all permissions for the OpenMe form.


  19. Click the Users list, click the test user, and make sure all permissions for the OpenMe form are cleared.


  20. Click OK to apply changes and close the User and Group Permissions dialog box.


  21. On the Tools menu, point to Database Utilities, point to Convert Database, and then click To Prior Access Database Version.


  22. Choose a folder under Save in. Under Filename, type Acc97File, and then click Save.


  23. Start Microsoft Access 97.


  24. Click the Open an Existing Database option, and then click OK.


Note that any user can open and read or modify design on any object, including the OpenMe form.

Additional query words: prb 


Keywords          : kbdta 
Version           : WINDOWS:2000
Platform          : WINDOWS 
Issue type        : kbprb

Last Reviewed: May 13, 1999