Go Back   Access World Forums > Microsoft Access Discussion > General

 
Reply
 
Thread Tools Rate Thread Display Modes
Old 11-14-2019, 01:03 PM   #31
theDBguy
Iím here to help
 
theDBguy's Avatar
 
Join Date: Oct 2018
Location: SunnySandyEggo
Posts: 6,570
Thanks: 58
Thanked 1,437 Times in 1,418 Posts
theDBguy has a spectacular aura about theDBguy has a spectacular aura about
Re: A Question of Trust

Quote:
Originally Posted by isladogs View Post
Hi DBG
Also to clarify, in my clients' networks its also true that no app ever gets installed unless it's an application approved by the IT network staff following advice from other senior staff. That decision can typically take several months and I've often had to overcome hostility from network staff to installing any Access app across the network. If the 'powers that be' are not prepared to accept my conditions, I don't proceed with the sale.

However, once approved, the application(s) are installed by program admins/network staff to the workstations of all approved users ONLY.
This happens automatically the next time the user(s) log on. Similarly the script to trust the location is run automatically.

A typical client organisation will have anything up to 250 users but, at most, only 2 or 3 will be given elevated permissions to manage the application

End users do not have permissions to install or edit any applications anything themselves nor do they have permission to edit the registry (even if they know how). As they have no ability to reach Access options, end users cannot do any editing there either.
The reason for doing all the above is once again to be safe rather than sorry.
As I say the system has been in use for well over a decade and is absolutely foolproof.
So, I guess the only difference then is in my workplace VBA is disabled and at your client's, it's not. Correct? Do you know if any of their users could potentially put a VBA enabled file in the approved Trusted Location?

__________________
Just my 2 cents...

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
theDBguy is offline   Reply With Quote
Old 11-14-2019, 02:06 PM   #32
isladogs
High Noon Moderator
 
isladogs's Avatar
 
Join Date: Jan 2017
Location: Somerset, UK
Posts: 11,310
Thanks: 115
Thanked 3,095 Times in 2,813 Posts
isladogs is a splendid one to behold isladogs is a splendid one to behold isladogs is a splendid one to behold isladogs is a splendid one to behold isladogs is a splendid one to behold isladogs is a splendid one to behold isladogs is a splendid one to behold
Re: A Question of Trust

I don't see how any application can run code if VBA is somehow disabled.

I'm talking about my clients networks - not my own networks.
Therefore I cannot guarantee they all lock down their networks appropriately.
However, I've never yet sold an site license for an application where the security has been less than I've described.

Users do not know which locations are trusted nor can they install or move any VBA enabled apps to locations trusted by my apps. As I keep saying there have never been any issues related to the deployment of my commercial apps in 15 years with multiple clients and several thousand workstations.

If any suspicion ever arose that installing my apps had indirectly caused a problem, I guarantee I would be informed...and not necessarily in a polite way.
__________________
If this answer has helped, please click the Thanks button and/or click the 'reputation scales' symbol on the left.

Colin (Mendip Data Systems)
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


Website links:
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


Common sense and a sense of humour are the same thing, moving at different speeds. (Clive James - RIP)
isladogs is offline   Reply With Quote
Old 11-14-2019, 02:29 PM   #33
theDBguy
Iím here to help
 
theDBguy's Avatar
 
Join Date: Oct 2018
Location: SunnySandyEggo
Posts: 6,570
Thanks: 58
Thanked 1,437 Times in 1,418 Posts
theDBguy has a spectacular aura about theDBguy has a spectacular aura about
Re: A Question of Trust

Quote:
Originally Posted by isladogs View Post
I don't see how any application can run code if VBA is somehow disabled.

I'm talking about my clients networks - not my own networks.
Therefore I cannot guarantee they all lock down their networks appropriately.
However, I've never yet sold an site license for an application where the security has been less than I've described.

Users do not know which locations are trusted nor can they install or move any VBA enabled apps to locations trusted by my apps. As I keep saying there have never been any issues related to the deployment of my commercial apps in 15 years with multiple clients and several thousand workstations.

If any suspicion ever arose that installing my apps had indirectly caused a problem, I guarantee I would be informed...and not necessarily in a polite way.
No, the app won't run, initially, because VBA (or perhaps more accurately, the Content) is disabled as a default. But as soon as the user clicks the "Enable Content" button, then the app will run. I guess I wasn't so much as saying your app can cause any issues or problems. I was just saying some organizations could elect to be more strict than necessary. And so, even if the app passed all the approval tests and was deemed "trusted," users on out network still has to click that stupid button before the thing will work.

__________________
Just my 2 cents...

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
theDBguy is offline   Reply With Quote
Old 11-14-2019, 02:40 PM   #34
isladogs
High Noon Moderator
 
isladogs's Avatar
 
Join Date: Jan 2017
Location: Somerset, UK
Posts: 11,310
Thanks: 115
Thanked 3,095 Times in 2,813 Posts
isladogs is a splendid one to behold isladogs is a splendid one to behold isladogs is a splendid one to behold isladogs is a splendid one to behold isladogs is a splendid one to behold isladogs is a splendid one to behold isladogs is a splendid one to behold
Re: A Question of Trust

The point I'm making is that by requiring users to click the button they are effectively being given 'privileges' they may try to misuse later with another app.

That option doesn't arise with the system I'm describing. In my opinion its safer.

As I've already stated, every organisation I've ever worked with has been incredibly strict about security. I've frequently had to argue my case and almost always have done so successfully. If I can't convince them, I don't get the sale ...but I'm happy anyway as it has saved me unwanted hassle in additional support time.
__________________
If this answer has helped, please click the Thanks button and/or click the 'reputation scales' symbol on the left.

Colin (Mendip Data Systems)
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


Website links:
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


Common sense and a sense of humour are the same thing, moving at different speeds. (Clive James - RIP)
isladogs is offline   Reply With Quote
Old 11-14-2019, 02:55 PM   #35
theDBguy
Iím here to help
 
theDBguy's Avatar
 
Join Date: Oct 2018
Location: SunnySandyEggo
Posts: 6,570
Thanks: 58
Thanked 1,437 Times in 1,418 Posts
theDBguy has a spectacular aura about theDBguy has a spectacular aura about
Re: A Question of Trust

Quote:
Originally Posted by isladogs View Post
The point I'm making is that by requiring users to click the button they are effectively being given 'privileges' they may try to misuse later with another app.

That option doesn't arise with the system I'm describing. In my opinion its safer.

As I've already stated, every organisation I've ever worked with has been incredibly strict about security. I've frequently had to argue my case and almost always have done so successfully. If I can't convince them, I don't get the sale ...but I'm happy anyway as it has saved me unwanted hassle in additional support time.
Misuse privileges, who me? Never!
__________________
Just my 2 cents...

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
theDBguy is offline   Reply With Quote
Old 11-14-2019, 02:56 PM   #36
isladogs
High Noon Moderator
 
isladogs's Avatar
 
Join Date: Jan 2017
Location: Somerset, UK
Posts: 11,310
Thanks: 115
Thanked 3,095 Times in 2,813 Posts
isladogs is a splendid one to behold isladogs is a splendid one to behold isladogs is a splendid one to behold isladogs is a splendid one to behold isladogs is a splendid one to behold isladogs is a splendid one to behold isladogs is a splendid one to behold
Re: A Question of Trust

Quote:
Originally Posted by theDBguy View Post
Misuse privileges, who me? Never!
Now that reminds me. I'm about to send you an automation attack app

__________________
If this answer has helped, please click the Thanks button and/or click the 'reputation scales' symbol on the left.

Colin (Mendip Data Systems)
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


Website links:
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
,
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


Common sense and a sense of humour are the same thing, moving at different speeds. (Clive James - RIP)
isladogs is offline   Reply With Quote
Reply

Thread Tools
Display Modes Rate This Thread
Rate This Thread:

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Windows 7 Trust Centre? Lateral General 8 11-13-2013 02:47 PM
Trust Centre aussie General 5 06-19-2012 06:03 AM
Question Trust what location? AccessProgram General 1 12-18-2009 08:45 PM
Trust issue alorenzini Macros 14 10-24-2007 07:07 PM
Runtime Trust Jim Stanicki General 0 09-14-2007 06:45 AM




All times are GMT -8. The time now is 12:12 AM.


Microsoft Access Help
General
Tables
Queries
Forms
Reports
Macros
Modules & VBA
Theory & Practice
Access FAQs
Code Repository
Sample Databases
Video Tutorials

Featured Forum post


Sponsored Links


Powered by vBulletin®
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.
(c) copyright 2017 Access World