At work I have an Access 2002 mdb all set up and working,
and security is working fine, except:

I have created a special admin group for this db, and
assigned the boss to it. This special admin group has
administer permissions for *everything* in the mdb. But
when the boss tries open an action query in design view, an
error message pops up saying that he doesn't have the proper
permissions.

He has the up-to-date front-end, and even a fresh MDW file.
But he still can't open queries in design view.

Why would that happen?

--
Thanks,
croy

On 4/01/2012 2:18 AM, croy wrote:
Croy,
Is it a split db? If so, have you assigned all permissions to the back
end tables?
You might also look at running the query with owner permissions.

--
Bob Darlington
Brisbane

On Jan 3, 10:18*am, croy <c... (AT) invalid (DOT) net> wrote:
It's been awhile since I messed with it. Open up the security profile
for your boss and verify his/her rights to that specific query. Are
you sure the rights you set rights that cascade throughout all the
forms, reports, queries?

Thanks for responding.

On Wed, 04 Jan 2012 08:46:49 +1000, Bob Darlington
<bob (AT) dpcman (DOT) com.au> wrote:

Yes.

Yes.

Always.

Thanks for your response.

On Tue, 3 Jan 2012 14:54:04 -0800 (PST), Patrick Finucane
<patrickfinucanetx (AT) gmail (DOT) com> wrote:

Boss is in the Special Admins group. Special Admins group
is set to have permissions for *everything*, front and back
ends.

--
croy

On Jan 4, 1:01*pm, croy <c... (AT) invalid (DOT) net> wrote:
As I said, it's been a while since I thought about a MDW so my reply
may be based on fogginess. Simply assigning a person to a group
doesn't do much if I recall unless the group has rights to the objects
as well.

Maybe you can also consider ActiveDirectory.
http://www.accesssecurityblog.com/au...nstiphout.aspx. Tom van
Shiphout has a nice sample at the bottom.

On Tue, 03 Jan 2012 08:18:34 -0800, croy <croy (AT) invalid (DOT) net>
wrote:

Well, I still don't understand why that would happen, but I
did find a work-around.

I copied the SQL for that query to a text file, and had the
boss create a new query and inject that SQL text and save
it. Now he can do as he wishes with that query.

--
croy