Shared folder permissions concern

Hi,

In my team we use Access database that is saved on shared drive - both the front end and back end. There is a VBA code inside the front end that makes a backup copy of back end every time when someone opens the database. VBA code also creates new folders so that the backups are sorted in folders named by dates.

I want to make sure that folder where the backups are is relatively secure. I tried to contact the administrator to set up the permissions for the backup folder so that users can't edit or delete files but unsuccessfully because then VBA code that could not have been executed.

What I need is that users have enough permissions so that the inside the backup folder the VBA script can 1) create a new folder (if necessary) 2) place a copy of a file (write permission) 3) replace a file (if necessary)
However, when user access that folder manually, user should not be able to make edits to the backup or delete backups, or eventually just not seeing that folder exists would probably do the job as well.

Any idea how to solve this? Challenging is that the administrators are very busy and I don't get to test with permissions, I need to make a precisely detailed request.

Thank you!

Barman58 said:

The way I would look at solving this issue is to have a New user created at a slightly higher level access than your normal users and use a RunAs function for the higher level functionality used in the scripts, it may be that one of the standard Windows server groups - Backup-Operators would have the required built in rights but as with anything you will need to bring in the Administrators to set things up so could be set specifically to exactly meet your needs

Thank you for your response. That option will not be possible because they won't be willing to create new users. Only option is to set the permissions in a way that provides reasonable security that users will not play around with a folder.

What triggers the script can it be modified? If you can script via schedule it could run as system another way would be to copy files to another PC or even FTP were you can control Access

It needs to go through the script, can't use scheduler.
Is anyone optimistic about simply setting the permissions right way and solve the problem that way?