UGH, after speding hours making a database secure using author fields and reader fields to prevent users from looking at others “Comments”, I just found out that any user can still get all the information on any document by simply right-clicking, going to the second tab and selecting the field! Is there any way to prevent this? Is this a bug?
Subject: Here is what I am talking about…
Here is what I am talking about…
As you can see in the screen below I have the document highlighted in the background view, I’ve right clicked & chosen Document Properties, then as you can see in the Second Tab of the Document Properties I’ve highlighted the “EmployeeComments” field and I can see its value is “Testing”.
How can I prevent users from seeing the field values in this manner?
Just to clarify, users cannot open the document because I have it locked down via Author/Reader fields.
Subject: RE: Here is what I am talking about…
Jeremy - this is a bit confusing because you say you are using Reader fields to prevent access to the document, but if you were using Reader fields correctly, your users wouldn’t even be able to see that the document existed - it wouldn’t appear in the view unless they were listed in the Reader field, so they wouldn’t be able to right-click on it to view document properties.
If you want to hide just the comments field from certain users, you’re probably going to need to either use field encryption, or put the comments field on a separate document with proper Reader access on it.
Emily.
Subject: Security Question - Hide Field Values For Users?
It sounds as if you are using reader fields to prevent users from looking at Comment documents they didn’t create. I suggest checking over your security and use of the reader/author fields. If they do not have reader access (via the readers field), they should not be able to read (or even see) the document in the view. Remember that a Readers field works WITH the form’s read access list if one exists. There is a lot of data in the Designer Help on using Reader/Author fields. This should sort you out.
Subject: Security Question - Hide Field Values For Users?
You could use response documents that contain the comments. Of course you should include appropriate authors & readers fields on the comment response document so security works properly.
Subject: Security Question - Hide Field Values For Users?
I just found out that any user can still get all the information on any document by simply right-clicking, going to the second tab and selecting the field! Is there any way to prevent this? Is this a bug? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
if the reader field was implemented properly, people not listed would NOT be able to see the entire document, so your concern about the property box wouldn’t apply…
Also, if you had existing documents in the database before you implemented the reader fields you would need to update those documents with the contents of their reader fields.
Best Regards
Barry
Subject: Security Question - Hide Field Values For Users?
If they can view (read) the document, they can view the field. You could encrypt those fields.
JYR
Subject: RE: Security Question - Hide Field Values For Users?
Yes you guys are all right, I “could” prevent them from seeing any documents at all in the view, but they need to be able to see the docs in the view, just not able to get proerties on them and look at each field - and here is why…
Hopefully this will clear somthings up:
My view in question is actually a calendar. Each employee submits a time-off request to his/her manager with personal comments. If approved the calendar view shows the dates the emplyee is out. The reader/author fields are used properly and do sucessfully prevent the wrong people from openining the documents, but ANYONE can right click on any document in the view and get its fields values. Is there a way to prevent that while still showing the documents in a view for obvious visual purposes? Is there a better way?
Subject: RE: Security Question - Hide Field Values For Users?
Look up ‘Hiding design elements’ and ‘Hiding the design of a database’ in the Designer Help.
These help docs may solve your problem.
HTH,
Paul.
Subject: RE: Security Question - Hide Field Values For Users?
Thanks for the suggestion Paul. This will hide (paragraph, by paragraph) when the form is opened by the user, but it still doesn’t prevent the user from right-clicking on the document in a view, then going to Properties, and seeing all the values for each field in the document. (I wish I could insert a small screen shot here to show you, but I cant figure out how?)
Subject: RE: Security Question - Hide Field Values For Users?
Are you sure you followed the instructions correctly (Hiding the design of a database)?
Once the db design has been hidden, users will still be able to right-click documents and access their properties, but the field values on the second tab will not be visible (are blanked out).
???
Paul.