How to Add Simple User-Level Security to Microsoft Access Databases

[@shahramahmadzadeh5285]

Hello Mr. Rost. I just wanted to say a big thank you to you for presenting this topic. I have been waiting for this presentation for a long time. I consider you my teacher, because I have learned a lot from you. Unfortunately, I live in Iran and because of the embargo, I cannot buy your courses. Once again, thank you for all your kindness and cares.

[@599CD]

You're very welcome

[@thomascole8216]

Pure Gold! Great Instructor, easy to follow. Everytime I watch I learn another nugget I didnt know. Thank You

[@599CD]

Glad to help

[@rhodnill5906]

I did this thing to my project, but to make it more secure, I hashed(encrypt) the password and the Username so that "if" someone can bypass my database and get accessed to the UserT, the password and Username field is hashed or encrypt. I did the Hash password twice, there's a Level 1 Hash then Level 2 Hash. Its like Password ⏩ Level 1 Hash ⏩ and the Level 1 Hash, Hash it again to Level 2 Hash and store it to the Password field in the UserT. just to make it secure. I also hashed the Username so that the bypasser have no Idea what is going on. 🤣🤣 But, thank you, my VBA code is more like a ancient text to read, so difficult to understand and it has more than 20 lines of code, unlike to your VBA Code is straightforward and easy to understand. 🤗😍 Can't wait for the Part 2 and 3. 🔥🥰

[@599CD]

Yeah, I do something similar with sensitive data: 599cd.com/Encrypt

[@Dragon-vv2ew]

Hi Richard, your videos are always interesting, every time I see your videos I always learn some little properties to add to my little databases. Thanks again to you and your team! I'm sorry I don't know English but with subtitles you can understand perfectly.Many greetings from Italy! Ciao Richard, sempre interessanti i tuoi video, ogni volta che vedo i tuoi video imparo sempre qualche piccola proprietà da aggiungere ai miei database. Grazie ancora a te al tuo team! Mi dispiace non sapere l'inglese ma con i sottotitoli si riesce a capire perfettamente. Tanti saluti dall'Italia

[@599CD]

You're very welcome

[@onpassive2441]

You are a great trainer. I enjoy your lessons. I wish my English was better so I could join the group

[@599CD]

Thank you! 😃

[@Airfo2248]

Love it! Just what I needed!!

[@599CD]

Glad I could help!

[@muraterkan8521]

thank Richard. it very very useful and clean instructions.. as always

[@599CD]

You're welcome

[@vishy8397]

Excellent, way of explaining things

[@599CD]

Glad you liked it

[@meowmadecrafts]

I was literally about to implement something similar today! Thank you for sharing!

[@599CD]

Welcome

[@JadeDragon407]

Cool video! The grueling thing about it, say if someone's name or password has a ' or " in it, then you have to do the whole For-Next through the lengths of the strings to duplicate any instance of Chr(34) or Chr(39), so that errors do not occur when querying the table for valid matches. In trying to learn how to do this [with greater security], I found if you type a name or password with incorrect upper/lower case, it is still passing the test and allowing to get to the step next (which it shouldn't). My question would be if there's a non-convoluted method of ensuring case expectations are also met. I've devised *A* way to do it, but it's... a little annoying. I do like that your videos are concise and able to be followed, ba-da-bing-ba-da-boom. Buonanotte!

[@RichardNickyBrian]

Thanks for this one too.. God bless your efforts. Mr. Richard, live long and prosper. ❤🎉

[@599CD]

Welcome

[@ADITYA_SINGH1]

thanks for considering the request sir cant wait for part 3😃

[@599CD]

You got it

[@UltraStarWarsFanatic]

Richard, can you tie these accounts to the ability to enter design view/etc.? In the sense of having an account for developers, and another account for end users?

[@danielantoyma4152]

Hi Richard, thanks for your videos. I'm trying to find some info about SSO with Access. Would you know if it's possible? Thanks

[@willmiranda9710]

Is there a way to create a message box that pops up when your mouse hovers of any label providing the details of the information require for that field.

[@599CD]

599cd.com/ControlTipText

[@andinascrocroandinas9352]

Hi Mr. Rost. One question. the code correct is that: If IsNull(TempVars("Username")) Then TempVars("Username") = "Nobody" MainMenuLbl.Caption = TempVars("Username") but if I have the second label that I want use in the same form, I just copy code? like that: example If IsNull(TempVars("Job")) Then TempVars("Job") = "Nobody" JobLbl.Caption = TempVars("Job") thanks

[@rbe6963]

Would it be a waste to pull, with an open recordset in vba, the record for the user and check for the id and password?

[@abaurre3]

I would like to implement this so I can do two things: 1- Open diferent forms or dashboards according to different users; 2- Use this user ID globally to register table changes and operations, by user. Is it possible to carry on this "UserID" throughout other functions and subs, including private subs?

[@599CD]

Absolutely it is. 599cd.com/SecuritySeminar

[@jtjones1294]

There's an issue if you have a correct user but blank password it will let you logon. I fixed the code by adding an or IsNull(Password) to the password if statement 13:35

[@599CD]

Yeah - lots of people have brought this to my attention. I'll be mentioning it in Part 4.

[@johnpescatore7529]

Thanks for the correction ... it was driving me crazy !

[@vic902]

Can multiple users still access the database if they all have the same login username and password?

[@Pyar_Sab_K_Lyea]

I have 2 fields in UserT table (1 is username) and (2 is Person Name) and I want to show Person Name in Main Menu Label using tempvar("PName") but error occured Invalid Qualifier. HOw to resolve it

[@thunderkai430]

Hello Mr Rost. Thank you so much for the tutorial. I want to ask that how do I add a "Hello" before the TempVars("Username")? Like I want to show "Hello XXX" in the main menu caption. Thank you.

[@austinmyers106]

you could do something like this MainMenuLabel.Caption = "Hello" & " " & TempVars("Username") still learning access, but i think that would work

[@hosseinpeyvandi3992]

Nice and clean as always but how can i find part2??

[@599CD]

Links in the description under the video

[@MichaelEaton-sd5wk]

Hi, how do we handle the password field being blank, It seems that the user can login with no password and I don't want that

[@599CD]

Yeah, that's something I really didn't think about when I was recording the video. I just assumed that everyone would know that you need to check for a blank password. Just throw an IsNull in there somewhere. 599cd.com/IsNull. Remember, these videos are more about giving you ideas and showing you what's possible. These are not meant to be finished, complete solutions. If you want a much more detailed and comprehensive security system for your database, check out my security seminar at 599cd.com/SecuritySeminar

[@MNAKSA]

Do you have any module to control data access like access security manager

[@599CD]

599cd.com/SecuritySeminar

[@petewarby7158]

AWESOME!!!!!!!

[@jamesrakestraw7125]

Hello. You make the Login. Do you need to make a Login log to?

[@599CD]

Sure

[@599CD]

599cd.com/TrackLogon

[@dolittlediehard1670]

Very good, love it but it would be better if users could set their own passwords and if the admin got an alert for 3 failed attempts.

[@599CD]

Sure... feel free to add all that if you want

[@luisdacunhalima734]

Hi. Great tips. Just one thing is not clear for me: My password is not Case Sensitive. Could we do that? Thanks

[@599CD]

Lots of people have brought this to my attention. I'll be mentioning it in Part 4.

[@AmayPlays]

Hi when I put no password it is letting me in only with valid username

[@kunashemupfeka939]

After inputting all the code into the build even it keeps on saying user not found

[@599CD]

Well that sucks

[@TopGearEthiopia]

Hi Mr. Rost. Thanks for the training however, Please leave the password blank and see the result!

[@onpassive2441]

If possible, activate translation so that we can benefit from your channel more.

[@599CD]

That's a KZbin feature in the settings you can set whatever language you like

[@professional7330]

❤

[@599CD]

:)

[@Rabih.khalil]

Thank you Richard. The code is not working properly because the user can logon without password I did'nt know why but i resolved the issue bye changing the code to: Private Sub LogonBtn_Click() Dim ID As Long, Pw As String ID = Nz(DLookup("UserID", "UserT", "Username=""" & Username & """"), 0) If ID = 0 Then MsgBox "User not found" Quit End If Pw = Nz(DLookup("Password", "UserT", "UserID=" & ID), "") If Pw = Password Then TempVars("Username") = Username.Value DoCmd.OpenForm "MainMenuF" DoCmd.Close acForm, Me.Name, acSaveYes Else MsgBox "Incorect password" Quit End If End Sub

[@599CD]

Thanks for sharing