Access Modern Web Browser Control – Authorizing Access To Devices

As you no doubt figured out with my recent posts on the subject:

I’ve been playing around with the new Modern ‘Edge’ Web Browser control.


I’ve made a ‘discovery’ that I thought I’d briefly mention.

I’ve been working on a new demo that I planned to already have up on my site by now, but which has been delayed due to a bug with the new control.  Nevertheless, what I accomplished so far allowed me to experience one particularity of this new control.

In Edge

If you launch a webpage that wishes to use any of your devices (microphone, camera, …) you will get prompted every time you load the page.

In the new Modern ‘Edge’ Web Browser control

However, the same is NOT true in the control.  You will get prompted once and only once!  Once you authorize access it won’t prompt you again.

What’s more worrying is the fact that, in my testing, the authorization seems to be granted to Access itself and not just the current form/report or database.  Thus, when any other database tries to use that authorized device, they will be able to do so without the user being prompted, or aware of the fact.  That’s right, it doesn’t even need to be the same database.

Don’t get me wrong, from a user experience this is great, but from a security standpoint this is absolutely horrible!