locking records

Question

hi everyone 

im creating a database to manage a money exchange company that has multiple employees, the adminstrator wants two features in the databse

1_locking every record at midnight so that they cant be modified or deleted by users later.

2_to create a form that has one field which is a special password to enable him to modify or delete a record, in short(the records have ID's when he enters the id to call the record for editing if its past midnight or later the record is locked and can't be deleted or edited so if he wants to edit it there is an endit button and on clickibg it a form opens asking for the special password "not his login password" and when he enters it the record is unlocked and can be edited and deleted)

Answer 1

While I agree with Tom and Don, there are things you can do to provide a level of security that will inhibit all but a dedicated person. 

First, you need to create a menu system for the application so that users only see this menu when they log in. 

Second, you to hide the Nav Pane and disable Special Access keys.

Third, you need to compile the app to an accde and distribute that as a front end.

Fourth, you need to establish Traverse access to the folder where the back end resides so users cannot navigate to that folder. 

Fifth, the menu system should open a form. On that form, in the On Open event you would lock the form against editing if the date was earlier than the current date. Also on that form would be an edit button that would prompt for a password to override the form lock.

Sixth, you would put a data macro on the table to audit any changes to the table just in case someone does get that far. 

With those provisions, you would defeat all but the most determined hackers.

Answer 2

Why not have a field to track when entries are made and lock the fields/form of the entry is prior to the current date.

Then create a user table with a field for the role and assign user or admin to each user.  Then in the form check the role and disable the above check if the user is an admin.

That all said, Tom is right that if you want Rock solid security this type of thing is more suited for an SQL Server back-end.

Answer 3

This level of security is more than can be expected of Access. Please look into a SQL Server back-end database for this. The free Express Edition would suffice for a dozen or so users.