Username and password with Access and JDBC application

Question

Hello all,
I have written an application which accesses a MS Access database. I have created a dialog which asks the user for a username and password. I then include the username and password to connect to the database. I have created groups and users in the Access database and have given each user different privaleges. However, when I run my application, any user can get any privelage. I am missing something. Thanks in advance.

Answer 1

// ConnectToDatabase.java
// Copyleft (c) 2001 RatKing
// ��������������������������������Java Bean
// E-mail: [email protected]
// This can use in JSP or Java Application or Applet
// AFTER you have setup the ODBC source in Windoz.
package rat;
import java.sql.*;
import java.util.*;
public class ConnectToDatabase{
private String driverClass = "sun.jdbc.odbc.JdbcOdbcDriver"; // JDBC-ODBC Bridge Driver
private String dbURL = "jdbc:odbc:yourdbname"; // the name of your ODBC Source's Database
private String userName = "yourname"; // user ID
private String password = "yourpassword"; // user password
private Connection connection = null; // Connection to the Database
private Statement statement = null; // Statement object
public ConnectToDatabase () {
// ������������������
public Connection getConnection() throws ClassNotFoundException, SQLException {
if(connection != null) {
return connection;
Class.forName(driverClass);
connection = DriverManager.getConnection(dbURL, userName, password);
return connection;
} // getConnection()
public void closeConnection() throws SQLException {
if (connection != null) {
// Makes all changes made since the previous commit/rollback permanent
// and releases any database locks currently held by this Connection object.
if (!connection.getAutoCommit())
connection.commit();
closeStatement();
connection.close();
connection = null;
} // closeConnection()
* If not connected to database...connect to database, create a statement,
* and, return the Statement.
protected void createStatement() throws SQLException, Exception {
if(statement == null) {
Connection connection = getConnection();
statement = connection.createStatement();
* This method executes a statement and returns true or false. Any type
* of Statement may be executed by this command.
public boolean execute(String sqlString) throws SQLException, Exception {
if(statement == null){
createStatement();
boolean returnValue = statement.execute(sqlString);
return returnValue;
* This method executes the statement and returns a ResultSet from
* execution of the query. Only a SELECT Statemet is applicable here.
public ResultSet executeQuery(String sqlString) throws SQLException, Exception {
if(statement == null){
createStatement();
ResultSet rs = statement.executeQuery(sqlString);
return rs;
* This method executes update statements and returns a count of
* the updates. Only a INSERTS, DELETES, and UPDATES are applicable here.
* In addition, SQL statements that return nothing such as SQL DDL statements
* can be executed.
public int executeUpdate(String sqlString) throws SQLException, Exception {
if(statement == null){
createStatement();
int returnValue = statement.executeUpdate(sqlString);
return returnValue;
* This method closes the Statement.
public void closeStatement() throws SQLException {
if(statement != null){
statement.close();
statement = null;
* If it is not connected to database, connect to database and
* create a statement and returns the Statement
* @param scrollType should be ResultSet.TYPE_FORWARD_ONLY
* or ResultSet.TYPE_SCROLL_INSENSITIVE
* or ResultSet.TYPE_SCROLL_SENSITIVE
* @param updateType should be ResultSet.CONCUR_READ_ONLY or
* ResultSet.CONCUR_UPDATABLE ;
protected Statement getStatement(int scrollType, int updateType)
throws SQLException, Exception {
Connection connection = getConnection();
// for cloudscape to work with scrollable resultsets, the autocommit
// should be false.
connection.setAutoCommit(false);
Statement statement = connection.createStatement(scrollType,
updateType);
return statement;
* If it is not connected to database, connect to database and
* create a preparestatement and returns the Statement
* @param sqlString queryString to make a statement
* @param scrollType should be ResultSet.TYPE_FORWARD_ONLY
* or ResultSet.TYPE_SCROLL_INSENSITIVE
* or ResultSet.TYPE_SCROLL_SENSITIVE
* @param updateType should be ResultSet.CONCUR_READ_ONLY or
* ResultSet.CONCUR_UPDATABLE ;
protected PreparedStatement getStatement(String sqlString,
int scrollType,
int updateType) throws SQLException,
Exception {
Connection connection = getConnection();
// for cloudscape to work with scrollable resultsets, the autocommit
// should be false.
connection.setAutoCommit(false);
PreparedStatement preparedStatement =
connection.prepareStatement(sqlString, scrollType, updateType);
return preparedStatement;
* this method executes the statement and resuts the resultSet due to
* execution of Statement.
* only SELECT Statemet is applied here.
public ResultSet executeQueryScrollInsensitiveReadOnly(String sqlString,
Vector values) throws SQLException, Exception {
PreparedStatement preparedStatement = getStatement(sqlString,
ResultSet.TYPE_SCROLL_INSENSITIVE,
ResultSet.CONCUR_READ_ONLY);
for (int i = 1; i <= values.size(); i++) {
preparedStatement.setObject(i, values.elementAt(i - 1));
// Execute a SQL statement that returns a single ResultSet.
ResultSet rs = preparedStatement.executeQuery();
return rs;
* this method executes the statement and resuts the resultSet due to
* execution of Statement. only SELECT Statemet is applied here.
public ResultSet executeQueryScrollInsensitiveReadOnly(String sqlString)
throws SQLException, Exception {
Statement statement = getStatement(ResultSet.TYPE_SCROLL_INSENSITIVE,
ResultSet.CONCUR_READ_ONLY);
// Execute a SQL statement that returns a single ResultSet.
ResultSet rs = statement.executeQuery(sqlString);
return rs;
* this method executes the statement and returns the resultSet due to execution
* of Statement. only SELECT Statemet is applied here.
public ResultSet executeQueryScrollForwardOnly(String sqlString,
Vector values) throws SQLException, Exception {
PreparedStatement preparedStatement = getStatement(sqlString,
ResultSet.TYPE_FORWARD_ONLY, ResultSet.CONCUR_READ_ONLY);
for (int i = 1; i <= values.size(); i++) {
preparedStatement.setObject(i, values.elementAt(i - 1));
// Execute a SQL statement that returns a single ResultSet.
ResultSet rs = preparedStatement.executeQuery();
return rs;
* this method executes the statement and returns the resultSet due to
* execution of Statement. only SELECT Statemet is applied here.
public ResultSet executeQueryScrollForwardOnly(String sqlString)
throws SQLException, Exception {
Statement statement = getStatement(ResultSet.TYPE_FORWARD_ONLY,
ResultSet.CONCUR_READ_ONLY);
// Execute a SQL statement that returns a single ResultSet.
ResultSet rs = statement.executeQuery(sqlString);
return rs;
* Method executeQueryScrollSensitiveReadOnly
* @param sqlString String
* @param values Vector
* @return ResultSet returns ResultSet due to statement execution
* @throws Exception
* @throws SQLException
* @see
public ResultSet executeQueryScrollSensitiveReadOnly(String sqlString,
Vector values) throws SQLException, Exception {
PreparedStatement preparedStatement = getStatement(sqlString,
ResultSet.TYPE_SCROLL_SENSITIVE, ResultSet.CONCUR_READ_ONLY);
for (int i = 1; i <= values.size(); i++) {
preparedStatement.setObject(i, values.elementAt(i - 1));
// Execute a SQL statement that returns a single ResultSet.
ResultSet rs = preparedStatement.executeQuery();
return rs;
* Method executeQueryScrollSensitiveReadOnly
* @param sqlString
* @return
* @throws Exception
* @throws SQLException
* @see
public ResultSet executeQueryScrollSensitiveReadOnly(String sqlString) throws SQLException, Exception {
Statement statement = getStatement(ResultSet.TYPE_SCROLL_SENSITIVE,
ResultSet.CONCUR_READ_ONLY);
// Execute a SQL statement that returns a single ResultSet.
ResultSet rs = statement.executeQuery(sqlString);
return rs;
//////////////Other things maybe useful ///////////////////
# Refer to Appendix A for more info on configuring the JDBC
# driver via setting of the DRIVER_CLASS and DATABASE_URL properties
#JDBC Driver Class
# for ODBC Driver:
#DRIVER_CLASS=sun.jdbc.odbc.JdbcOdbcDriver
# for Oracle Driver
#DRIVER_CLASS=jdbc.oracle.driver.OracleDriver
# for CloudScape Driver equipped with J2EE reference implementation
#DRIVER_CLASS=RmiJdbc.RJDriver
# for CloudScape Driver equipped with BEA Weblogic Server
DRIVER_CLASS=COM.cloudscape.core.JDBCDriver
#Database URL
# for ODBC URL
#DATABASE_URL=jdbc:odbc:tShirts
# for Oracle URL
#DATABASE_URL=jdbc:oracle:thin:@localhost:1521:ORCL
# for URL with CloudScape equipped with J2EE reference implementation
#DATABASE_URL=jdbc:rmi:jdbc:cloudscape:beeshirtsdb
# for URL with CloudScape equipped with BEA Weblogic Server
DATABASE_URL=jdbc:cloudscape:D:\\weblogic\\eval\\cloudscape\\beeshirts
#UserName to connect to database
UserName=TSHIRTS
#Password to connect to database
Password=TSHIRTS
#otherParameters
SUB_PROPERTIES=
#SQL Query
SQL_QUERY_STATEMENT = SELECT * FROM TSHIRTS.CUSTOMER
#SQL Update , if you run this program please change the id 129 to different value each time
SQL_UPDATE_STATEMENT = INSERT INTO TSHIRTS.CUSTOMER VALUES ('129','Sam','Cheng','S','123 Sam St.', 'C3','Baltimore','MD','20222','4104444444' ,'[email protected]')
#Join STATEMENT
SQL_QUERY_STATEMENT_JOIN = SELECT TSHIRTS.CUSTOMER.*, TSHIRTS.ORDERS.* FROM TSHIRTS.CUSTOMER, TSHIRTS.ORDERS WHERE CUSTOMER.CUSTOMER_ID = ORDERS.CUSTOMER_ID_FK
#OUTER JOIN for ORACLE
#SQL_QUERY_STATEMENT_OUTER_JOIN = SELECT CUSTOMER.* FROM TSHIRTS.CUSTOMER,STATE WHERE CUSTOMER.STATE(+) = STATE.CODE(+)
#OUTER JOIN for MSACCESS
#SQL_QUERY_STATEMENT_OUTER_JOIN = SELECT C.* , S.* FROM CUSTOMER C OUTER JOIN STATE S on C.STATE = S.CODE
#OUTER JOIN for MSACCESS and Cloudscape
SQL_QUERY_STATEMENT_OUTER_JOIN = SELECT C.* , S.* FROM TSHIRTS.CUSTOMER C LEFT OUTER JOIN TSHIRTS.STATE S on C.STATE = S.CODE
#SQL Statement with Like for MSACCESS
#SQL_QUERY_STATEMENT_WITH_LIKE = SELECT CUSTOMER.* FROM CUSTOMER WHERE CUSTOMER.FIRST_NAME LIKE \'*R*\'
#SQL Statement with Like for ORACLE and Cloudscape
SQL_QUERY_STATEMENT_WITH_LIKE = SELECT * FROM TSHIRTS.CUSTOMER WHERE FIRST_NAME LIKE '%R%'
#Prepared QUERY Statement
PREPARED_SQL_QUERY_STATEMENT = SELECT * FROM TSHIRTS.CUSTOMER WHERE FIRST_NAME = ?
PREPARED_SQL_QUERY_STATEMENT_VALUES = Roy
#Prepared Insert
PREPARED_SQL_INSERT_STATEMENT = INSERT INTO TSHIRTS.CUSTOMER VALUES(?,?,?,?,?,?,?,?,?,?,?)
PREPARED_SQL_INSERT_STATEMENT_VALUES =130,John,Hiller,Miller,125 S St.,C6,Baltimore,MD,20100,4104444444,[email protected]
#Prepared Update
PREPARED_SQL_UPDATE_STATEMENT = UPDATE TSHIRTS.STATE SET STATE_NAME = 'California' WHERE CODE = ?
PREPARED_SQL_UPDATE_STATEMENT_VALUES =CA
#Data base schema name
SCHEMA_NAME =TSHIRTS