protect network shared access database

Question

I'm making an application for a small office (4 users max), so i decided to set up a network shared folder and place my Access database there and give access for all users to that network share.

Problem is that when i share the database folder, it becomes exposed to everyone, so anyone with access to the network can just open the shared folder and delete the shared database.

Question : How can i protect it from delete ?? so that even when someone connect to the network and get access to the database file .accdb, he can't delete it !!!

Give them read/write/execute permissions but not modify or full control. If you're on windows, right click, properties, security tab — Scotch
I have edited your title. Please see, "Should questions include “tags” in their titles?", where the consensus is "no, they should not". — John Saunders

BaSsGaz BaSsGaz · Accepted Answer · 2014-05-09T18:58:43

Pretty simple, you can set permissions on the shared folder as all and you can set permission on the database file..

Here i'll show you how to do that on a folder and the same goes on for one file, but if you set permissions on the folder, you no longer need to set the permissions on the database file, since it's in the folder.

I'll assume you've already shared the folder with "everyone"

1- Left Click on the folder --> Properties

2- Click on the security tab --> Select "Everyone" --> Click Advanced

3- Click change permissions (For "Everyone" group)

4- Click Edit (For "Everyone" group)

5- Check All boxes in "Allow" except Full Control, Delete subFolders And Files And Delete

enter image description here

6- CLick Ok and you're done, everyone can read/write from the database, but no one has right to delete it..

To do all this in vb.net, you need two commands, after sharing the folder, you can use .RemoveAccessRule to remove delete permission

This code does all this automatically, it shares with everyone (or whoever you want), and remove delete permissions for the folder

Imports System.Management
Imports System.Security.AccessControl
Imports System.IO
Imports System

Public Class Form1

    Private Sub Form1_Load(sender As System.Object, e As System.EventArgs) Handles MyBase.Load
        Try
            Dim PermissionsList As New List(Of SharePermissionEntry)

            'Create a new permission entry for the Everyone group and specify that we want to allow them Read access
            Dim PermEveryone As New SharePermissionEntry(String.Empty, "Everyone", SharedFolder.SharePermissions.Read, True)
            Dim PermUser As New SharePermissionEntry("", "Everyone", SharedFolder.SharePermissions.FullControl, True)

            'Add the two entries declared above to our list
            PermissionsList.Add(PermUser)
            PermissionsList.Add(PermEveryone)

            'Share the folder as "Test Share" and pass in the desired permissions list
            Dim Result As SharedFolder.NET_API_STATUS = _
            SharedFolder.ShareExistingFolder("Test Share", "This is a test share", "C:\Folder", PermissionsList)

            Dim FolderPath As String = "C:\Folder" 'Specify the folder here
            Dim UserAccount As String = "Everyone" 'Specify the user here

            Dim FolderInfo As IO.DirectoryInfo = New IO.DirectoryInfo(FolderPath)
            Dim FolderAcl As New DirectorySecurity
            FolderAcl.AddAccessRule(New FileSystemAccessRule(UserAccount, FileSystemRights.FullControl, InheritanceFlags.ContainerInherit Or InheritanceFlags.ObjectInherit, PropagationFlags.None, AccessControlType.Allow))
            FolderAcl.RemoveAccessRule(New FileSystemAccessRule(UserAccount, FileSystemRights.DeleteSubdirectoriesAndFiles, InheritanceFlags.ContainerInherit Or InheritanceFlags.ObjectInherit, PropagationFlags.None, AccessControlType.Allow))
            FolderAcl.RemoveAccessRule(New FileSystemAccessRule(UserAccount, FileSystemRights.Delete, InheritanceFlags.ContainerInherit Or InheritanceFlags.ObjectInherit, PropagationFlags.None, AccessControlType.Allow))
            FolderInfo.SetAccessControl(FolderAcl)

            'Show the result
            If Result = SharedFolder.NET_API_STATUS.NERR_Success Then
                MessageBox.Show("Share created successfully!")
            Else
                MessageBox.Show("Share was not created as the following error was returned: " & Result.ToString)
            End If
        Catch ex As Exception
            MessageBox.Show(ex.Message)
        End Try
    End Sub
End Class

Don't forget to add reference System.Management And System.Management.Instrumentation And Also Add these modules SharePermissionEntry.vb And SharedFolder.vb your project

That's all there is to it, Hope this helps!! For more Info, refer to Link And Link.

protect network shared access database

1 Answers