MS Access restrict user access to a form


I have a user table which holds users name, unique Id and other details.

I have a main form accessible to all. On this form I would like to add a button which gives access only to the users from the UserTable.

I have a function which retrieves the user ID from the system as the users will use the database from their personnal PC. I'd like to compare this id with the ids from my list and open the form if the id matches else provide a popo message saying the access is restricted.

Thanks for your help on this!
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

without too much info, I threw something together. try this:

userid = functionThatProvidesUserID()
if dcount("fieldcontainingID","usertable","fieldcontainingID="&userid)=1 then
    exit sub
end if

Open in new window

Dale FyeOwner, Dev-Soln LLCCommented:
No points please.

Actually, I would use the main forms Load event to enable/disable that button, so that the button is not even enabled (or maybe even visible) if the user that is currently logged in does not have access to that feature.

The code would be similar to what etech0 posted:
Private Sub Form_Load

    Dim strUserID as string
    Dim strCriteria as string

    strUserId = functionThatProvidesUserID()
    strCriteria =  "fieldcontainingID='" & strUserId & "'"
    me.YourButtonName.Enabled = dcount("fieldcontainingID","usertable",strCriteria)=1

End Sub

Open in new window

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
dnt2009Author Commented:
Hi both,

Thank you for your feedback.

I get an error message and the line with the dcount function is highlighted. Am I to keep the " " quotes even after replacing by my real data?

dcount("userID","tblUsers","userID="&userid)=1 or


strCriteria =  "userID='" & strUserId & "'" or

me.GotoSection.Enabled = dcount("userID","tblusers",strCriteria)=1 or

me.GotoSection.Enabled = dcount(userID,tblusers,strCriteria)=1.

I've tried both and I still get the error message.

Get Blueprints for Increased Customer Retention

The IT Service Excellence Tool Kit has best practices to keep your clients happy and business booming. Inside, you’ll find everything you need to increase client satisfaction and retention, become more competitive, and increase your overall success.

What error are you getting?

For Dcount, keep the first version. for me.gotosection also keep the first version.

Try changing this line as follows:

strCriteria =  "userID=" & strUserId

(the other method is for if ID would be a string, but i"m assuming that it's integer
Dale FyeOwner, Dev-Soln LLCCommented:
What error are you getting?

Well, the UserID will be a string, so you must wrap that in quotes (I used single quotes) for your strCriteria.  The syntax for the DCOUNT should be:

dCount("SomeFieldName", "tblUsers", strCriteria)

You must include the field name and table name in quotes, and because the UserID will be a string, it will have to be in quotes.  strCriteria should look something like:

userID = 'fyed'

if you did a debug.print in the immediate window prior to executing the DCOUNT( ) function.  Try this:

strCriteria =  "userID='" & strUserId & "'"
debug.print strCriteria
me.GotoSection.Enabled = dcount("userID","tblusers",strCriteria)=1
How do you know that the userid is a string?
Dale FyeOwner, Dev-Soln LLCCommented:
from the OP's original post:

"I have a function which retrieves the user ID from the system"

Only system UserID I'm familiar with is the one retrieved by either ENVIRON("Username") or by the Windows API, both of which return the windows login userid.
Right. IT  could be, though, that he has a function that refers to environ("username"), and looks up the corresponding ID. I have a function like that in my db.

Why don't we ask the OP...

Question: What data type does your function that retrieves the user ID return? Is it a string, or an integer?

You can check this by pasting the function into the immediate window, pressing enter, and seeing if the result is in quotes or not.
Here is the codeblock from Dev Ashish from the AccessWeb
Option Compare Database
Option Explicit

Private Type USER_INFO_2
    usri2_name As Long
    usri2_password  As Long  ' Null, only settable
    usri2_password_age  As Long
    usri2_priv  As Long
    usri2_home_dir  As Long
    usri2_comment  As Long
    usri2_flags  As Long
    usri2_script_path  As Long
    usri2_auth_flags  As Long
    usri2_full_name As Long
    usri2_usr_comment  As Long
    usri2_parms  As Long
    usri2_workstations  As Long
    usri2_last_logon  As Long
    usri2_last_logoff  As Long
    usri2_acct_expires  As Long
    usri2_max_storage  As Long
    usri2_units_per_week  As Long
    usri2_logon_hours  As Long
    usri2_bad_pw_count  As Long
    usri2_num_logons  As Long
    usri2_logon_server  As Long
    usri2_country_code  As Long
    usri2_code_page  As Long
End Type

Public Declare Function GetUserName Lib "advapi32.dll" _
Alias "GetUserNameA" (ByVal lpBuffer As String, nSize As Long) As Long

Private Declare Function GetComputerName Lib "kernel32" _
Alias "GetComputerNameA" _
(ByVal lpBuffer As String, nSize As Long) As Long

Private Declare Function apiNetGetDCName _
    Lib "netapi32.dll" Alias "NetGetDCName" _
    (ByVal servername As Long, _
    ByVal DomainName As Long, _
    bufptr As Long) As Long
' function frees the memory that the NetApiBufferAllocate
' function allocates.
Private Declare Function apiNetAPIBufferFree _
    Lib "netapi32.dll" Alias "NetApiBufferFree" _
    (ByVal buffer As Long) _
    As Long
' Retrieves the length of the specified wide string.
Private Declare Function apilstrlenW _
    Lib "kernel32" Alias "lstrlenW" _
    (ByVal lpString As Long) _
    As Long
Private Declare Function apiNetUserGetInfo _
    Lib "netapi32.dll" Alias "NetUserGetInfo" _
    (servername As Any, _
    username As Any, _
    ByVal Level As Long, _
    bufptr As Long) As Long
' moves memory either forward or backward, aligned or unaligned,
' in 4-byte blocks, followed by any remaining bytes
Private Declare Sub sapiCopyMem _
    Lib "kernel32" Alias "RtlMoveMemory" _
    (Destination As Any, _
    Source As Any, _
    ByVal Length As Long)
Private Declare Function apiGetUserName Lib _
    "advapi32.dll" Alias "GetUserNameA" _
    (ByVal lpBuffer As String, _
    nSize As Long) _
    As Long
Private Const MAXCOMMENTSZ = 256
Private Const NERR_SUCCESS = 0
Private Const ERROR_MORE_DATA = 234&
Private Const MAX_CHUNK = 25
Private Const ERROR_SUCCESS = 0&

'******** Code Start ********
'This code was originally written by Dev Ashish.
'It is not to be altered or distributed,
'except as part of an application.
'You are free to use it in any application,
'provided the copyright notice is left unchanged.
'Code Courtesy of
'Dev Ashish
Function fGetFullNameOfLoggedUser(Optional strUserName As String) As String
' Returns the full name for a given UserID
'   NT/2000 only
' Omitting the strUserName argument will try and
' retrieve the full name for the currently logged on user
On Error GoTo ErrHandler
Dim pBuf As Long
Dim dwRec As Long
Dim pTmp As USER_INFO_2
Dim abytPDCName() As Byte
Dim abytUserName() As Byte
Dim lngRet As Long
Dim i As Long
    ' Unicode
    abytPDCName = fGetDCName() & vbNullChar
    If (Len(strUserName) = 0) Then strUserName = fGetUserName()
    abytUserName = strUserName & vbNullChar
    ' Level 2
    lngRet = apiNetUserGetInfo( _
                            abytPDCName(0), _
                            abytUserName(0), _
                            2, _
    If (lngRet = ERROR_SUCCESS) Then
        Call sapiCopyMem(pTmp, ByVal pBuf, Len(pTmp))
        fGetFullNameOfLoggedUser = fStrFromPtrW(pTmp.usri2_full_name)
    End If
    Call apiNetAPIBufferFree(pBuf)
    Exit Function
    fGetFullNameOfLoggedUser = vbNullString
    Resume ExitHere
End Function
Private Function fGetUserName() As String
' Returns the network login name
Dim lngLen As Long, lngRet As Long
Dim strUserName As String
    strUserName = String$(254, 0)
    lngLen = 255
    lngRet = apiGetUserName(strUserName, lngLen)
    If lngRet Then
        fGetUserName = Left$(strUserName, lngLen - 1)
    End If
End Function
Function fGetDCName() As String
Dim pTmp As Long
Dim lngRet As Long
Dim abytBuf() As Byte
    lngRet = apiNetGetDCName(0, 0, pTmp)
    If lngRet = NERR_SUCCESS Then
        fGetDCName = fStrFromPtrW(pTmp)
    End If
    Call apiNetAPIBufferFree(pTmp)
End Function
Private Function fStrFromPtrW(pBuf As Long) As String
Dim lngLen As Long
Dim abytBuf() As Byte
    ' Get the length of the string at the memory location
    lngLen = apilstrlenW(pBuf) * 2
    ' if it's not a ZLS
    If lngLen Then
        ReDim abytBuf(lngLen)
        ' then copy the memory contents
        ' into a temp buffer
        Call sapiCopyMem( _
                abytBuf(0), _
                ByVal pBuf, _
        ' return the buffer
        fStrFromPtrW = abytBuf
    End If
End Function

Function ReturnUserName() As String
' returns the NT Domain User Name
Dim rString As String * 255, sLen As Long, tString As String
    tString = ""
    On Error Resume Next
    sLen = GetUserName(rString, 255)
    sLen = InStr(1, rString, Chr(0))
    If sLen > 0 Then
        tString = Left(rString, sLen - 1)
        tString = rString
    End If
    On Error GoTo 0
    ReturnUserName = UCase(Trim(tString))
End Function

Function ReturnComputerName() As String
    Dim rString As String * 255, sLen As Long, tString As String
    tString = ""
    On Error Resume Next
    sLen = GetComputerName(rString, 255)
    sLen = InStr(1, rString, Chr(0))
    If sLen > 0 Then
        tString = Left(rString, sLen - 1)
        tString = rString
    End If
    On Error GoTo 0
    ReturnComputerName = UCase(Trim(tString))
End Function

Open in new window

Many good and happy things can then be done with ReturnUserName and ReturnComputerName
dnt2009Author Commented:
Hi all - many thasnks for your feedback.
UserID is string. So I've had the quotes and did a mix of etech0 and fyed's codes to have the button visible for the users in the table.

I will slips point between the both of you.

Hi Nick67 - Thanks for the code. Although I don't require it for this particular issue, I will keep it in mine for future use maybe.

Thanks all for your help.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Access

From novice to tech pro — start learning today.