0

Hi I would like to block access to insert any data on SQL when a User from a determined Active Directory Group access SQL from MS ACCESS.

Is this possible? if not is there any alternative?

I've tried a server trigger, and was able to prevent access to sql from someone by its IP, and the program name. But I would like to prevent inserts, is there a way to do this?

thanks, Gabriel

Improve this question
2
  • ONLY from within Access? Does that group need to be able to INSERT from other places?
    – squillman
    Mar 25, 2011 at 14:51
  • Hmmm probably they have access through win applications but they can be filtered, but yes the app has to be filtered. (I know access is impossible as the application name is office, so office is ok)
    – Gabriel Guimarães
    Mar 25, 2011 at 14:55

1 Answer 1

Reset to default
1

You can block for an AD user or group. But not reliably by client used.

Note: Permissions are for principals, not for code generally.

The client name can determined by sys.sysprocesses.program_name.

BUT

This is set by Application Name in the connection string, so it can be any value. And you can't set it in MS Access (upto version 2003 at least): it shows as "Microsoft Office 2003" same as, say, Excel (you can set it from Excel oddly).

So, no, you can't do it.

Improve this answer
1
  • so I can only block from a certain AD group ... thanks
    – Gabriel Guimarães
    Mar 25, 2011 at 23:29

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .