|
|
Stuarty
regular
Reg'd: Fri
Posts: 417
Loc: Strathclyde
|
|
Hi all,
Would like some of your expert opinions or advice. I have designed a data base using MS Access for my fathers company which will record employees details and working records. I find myself constantly going over and adjusting or tweaking it and is getting a bit of a hassle.
Is there any way i can put my database on the internet so that i can update it from any pc and also so he can update his employee records. I also would like to know what would be the security implications on doing this file share over the net.
Thanks, Stuarty
|
|
safeTsurfa
regular
Reg'd: Mon
Posts: 693
|
|
Not sure how databases are shared, though they can be. What I would say is keep it off the internet. if you have an intranet or VPN use that.
Otherwise if you know what machines will be used, perhaps something like a combo of a PC to PC direct connection for the workplace machines, and PCAnywhere to connect a home machine? In that scenario the machine where the files are located would be the host machine, and the accessors are the clients with both the direct link and PCanywhere.
safeTsurfa Stay alert! Stay safe! Stay alive!
|
byron
regular
Reg'd: Fri
Posts: 185
Loc: berkshire
|
|
I have nothing to add but to warn you that the fact that you are keeping that information on a computer makes it a legal requirement for you to register with the appropriate authorities, not to do so leaves you open to some pretty severe stuff.
http://www.oceaneagle.fsnet.co.uk/
|
putasolutions
regular
Reg'd: Tue
Posts: 12156
Loc: Infinity and beyond
|
|
I have to agree with safetsurfa. These files should not go on the internet. These are personal files and as such should be treated as that.
A VPN is probably going to be your best bet or alternatively you could set up a remote connnection to your fathers PC, so that the files remain on his PC and you manipulate them from yours.
As for the DPA 2000, Have a look at this site for the basics (and I mean basics!!)
Of all the Things I've lost, I miss my mind the most
|
greysts
regular
Reg'd: Thu
Posts: 17733
Loc: Colchester
|
|
To add to the points already made, the DPA also makes it a legal requirement that your father tells his employees that he is keeping their records on a computer and gives every individual the right to see everything that is being held about them. There are also rules about who in the organisation is allowed to view the records. I would hazard a guess that it means you don't have that right.
Edited by greysts on 22/08/2003 16:18 (server time).
|
TheFatControlleR
Forum Admin
Reg'd: Fri
Posts: 6554
Loc: Megatripolis
|
|
And, don't forget that the DPA also covers the card index, roladex, etc., i.e. not just digital data but analogue too. (Sorry, did I say analogue? Of course, I meant paper )
TFC Nothing is a problem for me...
|
safeTsurfa
regular
Reg'd: Mon
Posts: 693
|
|
Which all of course means a secure machine and encrypted data. My bet is it is all stored up in readable format on a common PC with a low level firewall and standard AV software? Not really enough. You could just about get around it by keeping such records on a removable hard drive and making sure it is locked away in a safe when not in use. But you absolutley must be registered with the Information Commissioner under the DPA, and have a written privacy and data access policy which all personnel are aware of, including a brief statement of their rights under DPA.
safeTsurfa Stay alert! Stay safe! Stay alive!
|