Security Concepts

I'm working on a project for the HR department where a manager will fill out a form that the HR folks will use to find qualified candidates. This form will contain salary information so I want to lock the record down so that only the HR folks and the specific hiring mananger can see the salary info. I could use record level security and only allow the current user (the manager) to browse his or her own records. But the user name is so easily changed that I don't want to rely on that method. The potential number of users is so high that I don't want to give everybody their own password for obvious reasons. How would you FMP gurus handle this?

I am experiencing a problem where I am not able to create a new record in the database via the web. The error message I get is: "Access Restriction: You do not have access to perform the action: new" The database is for work requests that our users can enter via a form on our corporate intranet. The form's action contains the username and password for an entry in the Web Security database, along with the hostname (i.e. <form action="username:[email protected]/FMPro">). This username and password combination is only allowed to: Create, Edit and run Scripts. The corresponding database password for this user has permissions set to the following (File &…

Hello, I am having a problem in making passwords restrict a user to certain layouts while the database is being used over the web. I have designed a database that uses buttons to go from one layout to another. I have been able to restrict access to certain layouts when the database is used on my own computer. That is, if I log on using a password other than the master password, I get a "No access" error message to the no-no layouts. However, when I test this out through my browser, a restricted password user can get to any layout. I also tested this out by putting the database on a server that is not my own computer and I get the same results. I am using …

How do you add Password Protection for users of the database? Version: Developer v6

I have a Dbase with lots of scripts ,how do i stop people importing them into their databases . I am sure there is a setting somewhere ,i just can't find it Thank you Paul Apted

Hi Everyone! One thing I really like about FMP 7 is that when you assign a user specific layouts, thats all they see in the FMP Layout List. In FMP 6 was able to write a process that would show me the list of layouts in a database and then have a user click on a button, get the list, select a laout, then they will be directed to the one they selected. This process does work in FMP, however, I would like to mimic the functionality in the FMP Drop down list for layouts. Get the layouts that the End User has access to and display them. I was going to try and LIST the layouts as well as they level of access, so I can filter out the ones with "0" access, bu…

I cannot get FMP to allow me to change the access to anything on any groups or any passwords. When I click on the group the layouts and fields darken, but then I click on a layout to limit it and the whole row becomes grayed. I have used the original password and the current master password to no avail. I am perplexed and frustrated. I think I need an in depth tutorial on groups, passwords and limiting access to certain layouts. Any help will be greatly appreciated.

Hi, I use WebCompanion to share out my database and use WebSecurity Database to do the security check. It will prompt me the password at the very first time when I accessing the database. However, when I click Home, and click the database again, it won't prompt me for password. I guess it should be the "session timeout" issue for web browser visiting, or I haven't logout the database. How can I "logout" and relogin to other user? or how can I set the session timeout ? Thanks alot! Kent

For anyone interested, I have a filemaker registration key system for sale. The solution allows you to incorporate registration facilities into your databases. Your customers can request a license key to unlock whatever features you decide. You process the request and return to the customer an activation key which is bound to both the MAC Address of the ethernet card as well as the hard drive geometry thereby making the license key only valid for that one workstation. The license key request file and actual license key are encrypted with 128bit encryption. The best part is this solution is only $59 (USD) for the raw files. We can be retained to assist you in incorporati…

Simple guestion, but maybe not a simple answer. Is there a way to keep a customers credit card information in a database that is secure? thanks in advance for any help on this.

I have a very fundamental question about security. I have a FileMaker database of about 50 files and right now and I need roughly 5 levels of access to each file. There is a growing group of about 200 employees that will need access to the database. I'm using the term database to refer to the collection of interrelated FP5 files that make up the entire system. It looks to me like I have to update 5 groups in 50 different files which is 250 entries and that seems like a lot of work but still manageable. I'm familiar with the Windows security model where an account is created for each user and each user is assigned to one or more security groups and users a…

Hello, I was wondering if there is a way to display only the record base on the username from Preferences and prevent a person to do search for records that doent correspond to them. thanks SolarPunk

Hi all Using FM Dev 5.5 and serving the files from FM Server 5.5 with users using a mix of FM 5.5 and FM 6 - all on Windows (2000 and XP) OK I have a solution that has ten security levels, each user is provided a security level and each record as it is created is given an appropriate security level based on a few criteria built into the system. When the user accesses the system I have a Global check fiel that stores that users access level and all seems to work fine. My access levels work from 1 being full access to 10 being very limited access Now the issue I have is that lets say a user has access level 5, which means they cannot view any records wi…

Hi All, Can somebody tell me how to restrict users to be only able to delete one record at a time, I have gone into the "Passwords" privileges selected the user and gone to the Limited delete records option, but don't know what to put in the calculations field. Is this the right area to do this and if so what is the formula. Many Thanks

Hi, Is there a way to allow users that have the appropriate password to create and modify NEW layouts without allowing them to modify the basic "developed" layouts? I don't think there's any problem with allowing these users to view the existing layouts as long as they can't change them. Thank you in advance, Tiger

Hi all! My question is probably easy, but I can not find any documentation to see if is even possible. Here is the problem, I need to change the Master/Administrator password on a very large relational database of about 30 files. Is there any way to do this across the board at 1 time? Or do I really have to shut everything down and do it file by file? Any shortcuts would be MORE than appreciated!

Hi all - I am in the process of developing an order management application. There will be multiple people using the Order Detail file at the same time. I need to track the User ID of the person creating/modifying records (in this case, different users can use the same machine at different times). Any suggestions as to how I pass the User IDs and then track the data? Thanks!

Appologies if this has already been posted but when I change my current passwords for some reason some of the settings change as well i.e. access to fields change without me altering them. Is this a common occurance or am I doing something wrong. It is a real pain when I am changing 128 files and access to fields changes randomly. All help appreciated.

Hey all, I have an application that I would like secure, but I know passware spy type programs will reveal the PW. I heard once, a way to defeat this with other special characters, what is the method to do that? and, is there still a less easy way to defeat it? Charles

I have created a dtabasse system that has been working very well excecpt for a few problems. Several records have "disappeared" or have been "deleted" by various users when they tried to do a search or some other command incorrectly. I have sat down with them many times to explain all thsi but it just isn't getting through. The way the system works is an engineer creates a record and fills in a few fields of info. These fields are used by the user to search but they should nto be able to edit them. The user MUST be able to edit the information that remains below in a portal. I have restricted access from the user to be able to Delete and Create records but how do I restr…

What is the best approach for applying security to multiple *--applications across multiple departments within a medium to large organization without invoking the security within FileMaker or using a third party plug-in? The environment is Windows based using FileMaker v6 as the client and one licensed copy of FileMaker Server v5.5 *-- application could mean a single or multiple single database file(s) or again a relational database or multiple relational database files . i.e. Dept Y User Y1 User Y2 User Y3 Dept Z User Z1 User Z2 User Z3 i.e. Users Y1, Y2, & Y3 in Dept Y should only see and access application…

A client of mine has had an HD failure and her FM databases, although recovered from the disk, have become inaccessible. She gets a message "Access privileges in this file have been damaged or possibly tampered with". But there was no password protection on any of them. Is there anything we can do to get access to the files?

Ok.basically, I fiddled around with the password and group options, i did not set any password but groups were created so now, when I open my file I am asked for the password....but I did not set any and leaving the field blank, I do not have access to the password section anymore in order to fix this!!!! I know you'll probably think "what the hell did you need to do this.." but that's what we call discovering!! Hope you can help!!

I have a three file database in which users are accidently "deleting" records by not choosing the SEARCH button to do searches. To alleviate the problem, I set up access so that people cannot edit the "COMPANY NAME" field of the database (the key field in which the relationships exist) unless they created the record today (tomorrow, they can't edit it). This poses some problems like not allowing people to edit other fields of other records. How can I allow all users to create and edit all records and fields except "COMPANY NAME" if they did not create that record?

Is there a way to secure scripts from being imported or run from an external file? I have a script that resets a counter that will limit the number of times a demo file can be used. I think I'm going to have to beef up the general security according to other posts I've read but I must say I was surprised to find I could import and/or run a script which I thought was inaccessible when using my file, simply by creating a new blank file, creating a script to run an external script and bingo! - it reset. I have tried to get around it by having a Status(CurrentGroups) identifier in the script to match the access level of the admin user which has helped from the point o…

Hi, Time has come for some more security settings in my files. I used the Moyers Advanced Login solution until now, so I had a 2 level access, and Privileges were checked by script. These were though limited to some record editing, printing, layout views,..., but all files keep being opened through the default password (say user). How can I implement different level of security, limiting access to files through the opening script ? Do I need a plug-in ? Sorry if this has already been adressed before, which surely has. Just wanted to spare some time before New Year's Day.

Hi, all, Here's what I want to do: I have 40 customers, each using the same version of my FM db. All currently operate independently of each other on their own machines. I would like to get FM Server, load a single master db on the FMS and have my customers all work from the one file. I am trying to figure out the best way to "partition" the single db so none of the customers can see each others' records, include them in reports, etc. I created passwords/groups to limit records each customer can edit and delete. This works fine, except I can't figure out if there is a way to automatically hide or omit the records that say "access denied." Any suggestions? Mayb…

I'm using FMP6 to host a couple of databases. I need to share them in a LAN and remotely. Is there a way to setup a password just for the remote access and not for the local? Thank you, Caio

I have a field that holds a password for basic access control but would like it not to be seen by the casual observer when the layout on which it resides is open. Can an ordinary text field be made to display those bullets that are shown in regular password fields when characters are entered? Cheers, Murray

Right now I have no groups set up on any of my files. I have two passwords for each file, one for Administrator (me) use, and one for staff use. I basically let them add/modify/ and in some cases delete the records, but not fancy stuff like editing scripts or exporting data. That sort of stuff. I read a cool article in the FM Advisor magazine recently about using groups, which I've never done before. I have a rather simple login process right now to authenticate users to the database. They enter their username and password, and it then checks a user.fp5 file I have to make sure their information matches. It works well for what it is, but to add any more 'cool' …

I am new to FM, we have a lot of FM db's and would like to allow users to change their passwords without having to change that password on all the databases. Is it possible to have a login layout with user name and password, verify the user/password against a db that contains user name, password, and an internal password (which is one of the several passwords that we currently use), and then, change the password for that user in FM? I guess the real question is, "How can I change a password internally on the fly? Possible? Thanks for any assistance!

Hi everyone, sorry for asking this but I am still pretty new to FileMaker. Basically I want to create a general password with restricted access which I left as blank and a Master password which has full access. I set Try default password to blank as well so whenever I open the database it will enter it with restricted access. From the help files, it says that I will have the choice of entering the Master Password if I hold down the Option key in Macs and Shift in Windows. However under Mac OS X whenever i try holding down the option key and opening the file I never get the choice, but it works in Mac OS 9. I am aware that if i make a script in another database with the pa…

Does anyone know how to make a field be accessible for data entry, but then once FileMaker is closed, that data becomes non-deletable next time the program is open. But then you can add more data in the same field, just not delete what was there previously?

Is it possible, when sharing a db with Web Companion & FMPU, to generate 1)a log of user IP address (with time/date stamp), and 2)the requests (field data) made with that browser? I am concerned about having a db shared with Web Companion & FMPU raped. TIA

I am getting ready to release a demo version of my solution. I have read a number of posts in this forum, and although I acknowledge that it would be more secure to offer a limited feature version, I am opting for a 15 day full feature demo. I am not making it possible to activate the demo version because I don't know a way to create an activation code which is unique to a copy of the demo. In other words...what would stop people from distributing an activation code, unlocking demo versions at will?

The user name in the dialogbox used by the web security db gets truncated in Swedish. Looks like: Anv

Can anyone tell me what can be done to utilize SSL security on a server where we have FMP5.5 unlimited running using web companion. We have no problems serving the dbs with this until we try to apply the SSL. Then we cannot serve the data. I have searched and searched the FileMaker site and the only thing I can find says it is possible but no instructions on how. Any help would be much appreciated.

Gents, While developing a solution, one of my betatesters informed me that he had been able to get the masterpassword by using one of the FMP password cracker programs. I have then checked that program out, and true enough, it can get the password both from a standard FP5 file as well as from a Runtime file where everything has been used to protect the file. Does anybody have an idea to how one can avoid this problem ? Using special chars or such ? Any recommendation would be appreciated. Just my 0.02

I've never posted and perhaps I am asking an obvious question, but I have FM6 on my computer in my office. Everyone in the department (which is in a different building, but on the same network) has FM6 as well. I have a database in which everyone needs read-only access. I finally have the passwords set up properly, and I set up remote access, but when anyone tries to open it in the other building they get a message that says: "maximum number of users," which is a problem. I am wondering if I have a single user version and I need a multiple user version or what else I can do? I am using OS 10.2.8

Is there a way to hide Field X from users logging in as User A, but make it visible to users logging in as User B? I have a solution that both Administration and Teachers need access to. (It is relational and contains 3 files--most of the time both users will only be in the main file) There is one field which contains confidential info that the teachers shouldn't see. I have passwords created for each group. I vaguely remember reading something about using a colored square to accomplish this, but I can't find that info anywhere I apologize if this is posted to the wrong area. Thanks for any help. Susan

Hello, I'm a newbie, be gentle. I'll admit, I have a pretty messy FMPro 6 file, since the client's needs change every week, and I've unfortunately made a lot of "band-aid" fixes instead of making a nice, neat database. Anyways... I am trying to accomplish a seemingly simple task: to restrict access to particular records, according to the information in a particular field. More specifically, this client uses manually-entered job numbers that end with one alpha character to indicate salesperson (not the most efficient way to work, but they've been doing this for years and don't really want to change it). They are hiring an assistant for one salesperson that …

Does anyone know the boolean syntax for allow/disallowing access to specific fields? If you are editing a password, you can select either "All Fields" or "Limited..." for things such as browsing, editing, deleting. However, if you select limited you are supposed to enter some sort of boolean equation - the syntax for which is not mentioned! So if ANYONE has experience with LIMITING PASSWORDS TO ACCESS ONLY CERTAIN FIELDS WITHIN A FM DB, please let me know... thanks, Matt Outdoor Sportz www.outdoorsportz.com

Hello: What is the best way to prevent a certain user name/group from using one of the buttons I created for admin use? Can I put a password on a button? The button performs a script. I want the general users to be able to use all the other buttons on the layout except one. Thanks Mike

We have a FM 4.1 file being hosted on FM Server. Today we were able to get right into the file without a password (which should be required). It just goes right to the opening script without the password dialog window. I've taken this file off the server and opened it in FM. The passwords are there. There is one that has total access and a few with read, read/write, etc. There are no "leave blank" passwords which doesn't matter anyway because you are never prompted for a password. I opened this file in FM 6 and the same thing happens. This just happened today. We've been using this file for many years, always entering a password before being able to get into the file. I g…

Hello, i was wondering if someone can help me. we are running fm 6.0 and i am trying to prevent user from duplicating record when they click on the file:records:duplicate. the users have password which allow them to edit and create new record, browse but i am want to turn off the duplicate from the menu. I saw around a plugin but i dont want to spend money ont it. is there a way using scripting and group access? Thank you, Victor

Hello, I'm a bit confused. I set up a group with a default password so the user does not have to enter the password all the time. I have a separate password that allows for all access. When I access the system it does not prompt me for a password. How will the system know what users are which? Any help is appricated. Shari

I am an employee of a school board and realized that a database would make work easier for staff as it would allow them to enter data once and then show in all different layouts so I created a database and sold the board on the idea. When I submitted a bill for the database, two companion files and in my business name they ignored it and paid me the amount I requested but for clerical work. Every school ( 1000) uses it. For the last two years they have asked me to make cosmetic changes to the way the layouts look but did not want to pay me . I insisted that because this database developer work is not in my job description and I did it at home on my own time, it needs …

Hi there, just asking if a database already compile using FM developer tool with permenent prevent modification of database structure, is that got any way to hack into the system, especially the layout mode and scripting. I know that there is some hacking program that can check the password of fm. I already do a custom secure login system, but i scare if there got any to go to layout/design mode and script, then all my login script will be change and made no function. The other question is i have a system run in kiosk mode and now i have set a demo version with limited to 30 records, i'm set the demo script in the script that create a new record. My script is like th…

In the Using the Web Security Database said that "When using the ExactSearch restriction for any field, the -findalland -findanyactions cannot be used with that database." I

I'm looking to create a solution which determines record level access dependant on login. I have done this so far by creating a users db and a token so that users A, B & C can only view records with a corresponding letter in the owner field. This works fine, however, I also require a further user(D) to be able to view all records regardless of who the owner is. Would this require an if statement along the lines of "If owner is D -findall" or would it be better handled via the web security db?

Hi, I have a database on a user's machine located out of my office. This database periodically export records to a new FMP database file type. The new FMP file is then emailed to me. My problem is, how to automatically protect this new FMP database (which contains exported records) from being opened. Any help?

Has anyone ever heard or implemented PGP key on FileMaker files from server to clients on large LANs? Has anyone done SSL in that scenario? Please share the experience. Thanks

I've created a limited time demo base on the "Bomb" sample file. But now I'd like to create a scheme so that users who pay for the database can enter an installation code to disable the time bomb. I've created a calculation field called "Unlock Code Formula" with the following formula: "XC346B8SV" & Right(UserLastName, 1) & Right(UserFirstName, 1) & Right(NumToText(Unlock Date), 1) & Left(NumToText(Unlock Date), 2). Then, I'll give my customers an installation code that corresponds to their user name and the date that they unlock the demo. When the installation code = the unlock code formula, the time bomb will not be activated. Here's th…

Does anyone know of any major changes to the Web Security features from FM4 to FM6? We use to be able to allow "All Users" to only CREATE records. With FM6, the only way to "All Users" is to grant BROWSE privilege as well. I've also tried configuring the FM Database Access privilege in conjunction with the Web Security.

I have a stand alone runtime solution containing seven files. Attached to that is a master password with full access privileges. However, when I hold the alt key and open the file, then enter the master password, I only get limited privileges. ( I cannot, for example, define fields) What have I missed?

Hi guys, I'm very new to filemaker and need help. My employer has purchased a program called Studio Suite. This program enables the employees to enter information pertaining to jobs we are doing. (we're a post production facility) He wants to be able to password protect certain things on certain pages, for example we have a client database. He would like to have it so if you are not a member of a certain group you cannot access that part of the page. Even better if you are not a member of a certain group, then you shouldn't even be able to see what you don't have access to. Am i being clear? So with that said, is there a way to create groups. assign users to those groups…

Dear All I have read about locking a record but I really do not understand the way how people make it. For example, I have a database named A ...in A ...I have a several records ...how can lock record number one or record number 3 so that people can only see but not edit it and unlock it to edit? Where can I find an example about locking record? Thanks All

I have 3 groups, 3 passwords. In the Access Privileges I select a groupname and try to unmark two of the three passwords - I can not umark the passwords. Unmarking field and layout access is not a problem. Why can't I unmark passwords here? I have download the script posted before and that works great, but in my app it does not work at all :-( John

I have a database with a portal in it and usergroups are defined. How do I setup the calculation that restrics other users to work only in the portal. Is it also possible to let them use only a limited set of buttons? Thanks, John

Hi there, i found a site "www.lostpassword.com" which contain a program that allow user to view the password of a file. The program can view the password of many type of system, like winzip, lotus123, filemaker, access,... I have download the demo version of filemaker call "Filemaker Key". It really works and display out all the password insite a file. For example, a file "test.fp5" contain 5 password incluse a master password. With using the filemaker key, it can display out all the 5 password. It is a big security issue if a user use this program to check the master password and then use the master password to log into the system and do some changes or view the sec…

Hi there, I think this issue was already discussed once here, but I'm wondering if anyone has any [new] ideas. On Friday, I added a new group and new password to a file in FM Pro v5.03 (which is hosted on a v5 FM Server). As soon as I put the file back up on the server, major changes to field access appeared. I took the file down, again, and changed the field access privledges to the orginial settings on *all* groups; that is, no field-based restrictions. However, this morning I got a call from the client that fields were suddenly inaccessible again, the specific fields which were the problem on Friday. What the heck is going on here? I've heard about scripts d…

I have an invoice system that is setup so our order entry people can not edit an invoice after the day it has shipped. I used the FM passwords, and setup the edit option to not allow editing if currentdate > or = dateshipped+1. Most of the time this works great. However, sometimes it will not allow them to edit it even if the dateshipped is empty. To fix this, all they have to do is quit Filemaker (5.5v2) and re-launch FileMaker. One of the computers that is now doing this, only runs FileMaker. I have tried to reinstall FM and also did a clean install of the os (9.2.2, but is still happens with not seeable pattern. Has anyone else seen this? The files ar…

Hi, What can I do to stop this.... I purchase a secureFM plug-in; use it in my open script to lock/remove all menus....ALL is good so far. I opened (by mistake) an FM file with a word processor and what do i see!!! I can read my entire SecureFM registration code & password!!! Anybody with Wordpad can see it and use it in their solution or to unlock mine, easy way to get free secureFM plug-in. Thanks for any advice you can give. (i am using FM Pro 5.5v2) --Dan

hello forum, i am going to the well again. can anyone tell me the process of having a user only view the records they create.

Hi, I began using ZoneAlarm 3.7.202.0 with FileMaker Server 5 running on Windows 2000 server. The users can access the database files hosted on the server, but can only view data, not enter records, etc. I am very new to firewalls, wondering if anyone knows how to allow data entry and keep high level of security at the same time. Thanks very much

Hi, I have been requested to lock down a portal in a layout so that only a small group of people can modify the fields in the portal, all other users should have read only access. I would like to know the best way to do this. Ideally, I do not want additional layouts just for certain groups, and neither do I want a password input box unless completely necessary. Any Ideas? Thanks, Joseppic.

Hello, I was wondering if someone can help me. I am have two group one is call Sales & the second call Operations. The Operations Group can only browse and print record but i notice that under the menu of filemaker pro when i login with the password assign to the group, they have the option to change the password. i want to turn off that option. i am using filemaker pro 3.0. any help would be appreciate it, Thanks, Victor

FMP 5.5 user I have a main interface controlling all databases linked to it. It will eventually be put onto FMServer but not until I can controll with ease to myself & the users. I would like to set it up so that a user first logs-in with their access level code (alc), which would open the main interface. Then be able to cruse in & out of all the db's with out having to enter there alc every time they went into a new db. (1 code, 1 time = access to all bd.) Right now, it's set up like this: Open -(no alc required) Main interface page opens, (which links to 5 db's). alc is required for each db to open. (5 alc's, 5 db's = access to all) I want: …

Hi Guys, I have installed FileMaker Pro 6 at my client's location, is there any way of preventing the users from changing the UserName that I have allocated them during the installation. In other words, is there a way of dimming out the general tab in the application preferences? Thanking you guys in advance Jalz

So get this... Today I am working on a clients database and I decide to test it out on my PC (hosting it on my Macs) and when I go to Open Remote I see another person popping up on my network...so basically this guy is on a DSL line and he isn't running a firewall so his FMP was broadcasting to every FMP client on the same ISP...and anyone could come along and destroy this guys entire business records...since his Preferences setting was to try the default password. I sat and thought about this...and I felt I had to do something...but what? I don't know his email or personal info...so I went into layout mode...typed him a message on his database so he would see i…

Hi, I wish to make a DB secure. In the past I've setup password access; low priv users just press return, high priv users ender a password known by all senior people. The problem with this is that low priv users have to type return - an unnecessary action. So.. Is there a way so that a password is only prompted for if a user tries to enter data into a field, rather than just browsing it which can be done with no password requests? I also need such a solution to work in a portal. Any ideas? Thanks, Joseppic

Hi All! I'm sure this has been discussed several times already. However, I MUST post my issue. Situation : I have a database to build. I need to find a way to protect the design of this database. I've already gotten past the "Custom Layout" portion. Now It's time for user security. This company is going to have an administrator that will manage this database. The also want the ability to "Clone" these databases for other projects in the future. Problem : In order to create and change passwords in FileMaker Pro, you have to give "Full Access" to the database which makes all the design within the database fair game. I'm also using the …

Hi All, when I do a relationship from file A to File B, When I open file A , I can open file B by clicking Window menu. IS there a way that block it or enven they click on Window menu ...they click the File B, they can not see anything without using password protection? ...Since I don't want to use password protection for every file and I don't want people to play around with other files by clicking on Window menu. Any comments are much appreciated. Thanks Anh Tran

Please bear with me this is complicated and I'm new so I'll probably use the wrong term half the time, however... I have four computers networked, no server so the host is the first computer to open the bd and the other three computers are guests. There are ten staff and no-one has exclusive use of one computer, we all use whichever computer is free. I've made a lovely db and I'm really enjoying learning filemaker but someone is being are sloppy about the information they enter, so I need to know who they are. As we do not each have exclusive use of a computer I don't see that a password for each computer will help, I need a way for each person to log on with the…

My DB - consists of 18 files User passwords for 3 people (eg 3 passwords) Question: How can I change the user 1 password (for example) on all files all at the same time, without having to go into each file seperately?

Hi I have a DB that I have an enquiry layout for general access and an Editors layout to make changes. Now I only want those in group A to be able to access the Editors layour and therefore Group B cannot. I have setup in the passwords, groups and overview where Group B passwords do not have access to the Editors layout - i.e. NO ACCESS not even read access. OK that's fine and works. But what I want to do is have a button that users click on to go to the Editors layout - I have scripted this as Allow User Abort (Off) Set Error Capture (On) If ("Status(CurrentError)=0") Go to Layout ("Editors") Else Show Message ("Sorry you do not …

Hi. How could I prevent users to create new records in a related file when the master record is locked? Example: An invoice locked on a record-by-record basis contains several items in a portal. The related records (details) are also locked by a calculation field related to the master record. The user can not modify the master record or the related records, but can create new related records, modifying in such way the master record. Thanks in advance for any help! [color:"black"] [color:"blue"]

I work for a company of about 50 employees. I recently started doing alot of work from home. After I started working from the house it seems the owner has placed the full access password on a board next to a computer. I recently started noticing layouts changing(very disturbing). One layout that changed is a large portal that..yes...is used for printing. I fixed the layout and tried to explain that moving and resizing fields on this layout could be a disaster. The owner feels everyone should have full access. I totally disagree. It is a matter of time before someone looks at a script and changes it without understanding what they did. Or possibly change a field for…

This is a general question to the board Before i start i do understand the principle of having demo files one with only a certain amount of records that can be saved i.e. 250 record limit and disabling exporting, printing, deleting, etc and then haveing them pay to get a fully working copy My reasons are limited bandwith for them to redownload a paid version and i can not afford the prices for the developer plugins that would provide these features and functions for me. But this is what i would like to do please let me know if i am on the right track. (1) If the user sets the clock back from the date that the file was launched. then quit the program wi…

I am runnig Filemakker unlimited 5 on a Win2K Pro PC. At home I have my win2k pc on a static IP are there any known security holes with this setup that I should be aware of? I had read a post by someone before that had a similar setup as mine and someone put some software called DAMEWARE on it by hacking into the pc. I want to make sure this doesn't happen to me. Thanks,

Does anyone know how to change the order that passwords are displayed in FMPro 6.0 Access Privileges, without reentering them in the desired order? Same question about Group names also. Thanks

This seems to be a better place to continue the discussion that began in this thread. I've been doing some experimenting with Filemaker's security system as a result of the discussions in the above topic. There are generally two parts to any encryption system: the encryption algorithm, and the secret key value that the algorithm uses to do the encryption and decryption. With the experimenting that I did, I worked out the algorithm that is used to encrypt/decrypt Filemaker passwords, but I didn't initially find how to retrieve the key. However, because of a rather serious flaw in the algorithm, it is possible to decrypt most passwords without even knowing what t…

Can access to your database be any er. Check out Finger Prints Finger Prints it seems a little bit pricy

Hi, I've been trying to get full access privileges of "The Gateway" by Giuseppe Pupita at http://fmfiles.com/ to see how it works. On some previous postings, people seem to indicate that it can be done but I can't find how to do it. Are we allowed to look at the inner workings of it? Or is just a 'viewing' application. Thanks Brian

How do passwords affect my scripts? If User-A's Access cannot create New Records or Delete records, will my scripts be able to do these things while User-A is logged in?

Hi I do not know if this can be done although I have found that very few things cannot be done with filemaker. We sell vehicles as a business. Before we sell the vehicle, all kind of expenses go against the cost of the vehicle. Once it is sold, accounting wise, we do not want to play around with the cost of the vehicle and that is the reason I want to lock the file after it is sold. Where it gets more difficult is that we do customer satisfaction follow ups and hence we have to access the file and log any concerns that the customer has in order to be able do solve his problem and also to find way to improve our processes (when similar…

Basicly, I have made a relational database (4 database files + 1 menu file) for a college project and i need to put a password on the whole database, so only someone with the password has full access to the database. I have done this with each file individually, but i need to know if i can setup a password so that it is used thoughout the database. (Eg. I change the password on a single file and the password changes thougout all the files) Thanks MaccA

Hi All, I would like to know if there is a way to script to change password in first level. It means that I don't want to click (shift + file ) to open then go to access privilege and change password. I want to know if there is a way to go to a layout and change it. Thanks Anh Tran

Hi All, Password question comes to me now . I have several passwords for several departments . Let's say department A password is A, department B password is B. To check each department A is A , I have to create a new record , I can not use a global field. Is it the right way? Since the second people come , it will change the password for whole file. Then From First file password is A, he can go to see second file which has to keep the password A for further purpose. Let's say password A can go to other database, password B can go to different database...something like that. In order to keep password A, do I have to create a new record. I don't want to create new rec…

We can not determine how to shut off user access to the ability get to the field definition level of the databases on the server. We are not able to shut off remote access from the user's computers. We are using FileMaker Sever 5.5 and FileMaker Pro 6 . Please help.

I defined 2 passwords for each file. One is the standard user (blank password). One is a password that has full access (admin password). It asked me for a full access password, so I entered in the same password as the admin password, now I can't open the file and get the access privelages menu, just the change password box. WTF? Now that I realize the full access password is seperate from one that has 'full control', I suppose I should have made them different passwords, but there should be a warning so it wouldn't allow multiple of the same passwords. What is a guy to do?: I guess it's not really a HUGE problem, but I'd really like to be able to change the r…

Hey all, New to the forums and relatively new to FMP. I'm looking for a sample database for record locking. Basically, I have a billing sheet DB that I want users to click on a button to submit their daily billing sheet. After submitting, I want editing of this record to be locked for the user but to be turned on/off by an administrator. I haven't created a multi-user solution before so any help would be appreciated. Thanks.

Greetings All, I have a multi-user mode issue that I am hoping someone can provide some advise. This is the very first FileMaker system I ever built, and I may have made some bad assumptions. I have a system that I am rolling out for our company. It consists of the following files: Menu.fp5 Contacts.fp5 Jobs.fp5 Invoices.fp5 TimeCards.fp5 Staff.fp5 There are other files that are not relevant also. (for shorter version, skip to THE PROBLEM) I have implemented a custom authentication system so that I can provide very granular control on actions. Menu items, status area, and other items are all blocked with the built-in security model, an…

I am having a problem with corrupt files and have narrowed it down to the user closing the application via the windows X button (top right of screen) instead of using the quit button which closes all the files in an orderly manner. I need a way to disable the window button at the top right forcing users to use the quit script. the application will eventually run in runtime (developer) but I dont want to use Kiosk mode. Any suggestions - others MUST have hit the same situation Many thnaks John

I'm having a kind of dumb problem. I have a login system in place. When the username and password is validated, it forwards the user to a certain file based on what 'unit' they are. Anyways, I have the 'assessment' unit being forwarded to a file called 'contact'. Contact, like all my other files has two passwords set up. [no password], and an admin password (full access). There is an open script on the file to see if the user is logged in. If so, it displays the data. The 'try default password' box is checked, with the blank password. Upon logging in, I get a "No Access" layout. The privelages on the [no password] password are sufficient. They have al…

Right now I'm just playing around with the idea of a login for my database. So far, I've started: 1. Startup file sitting on the desktop. This file opens the 'login' file on my FM server. 2. Field for username, field for password on the login layout. 3. Once the user fills out their login information, a very crude script runs: - goto related record (based on a relationship to the user_db file, using 'username' in both files) - if password = relationship::password - ................ And so on and soforth. It works, which is cool because I don't know much about FM, but still got something to work. My ultimate goal is to have p…

Does anybody know if there is a way to set field-level access rights in Filemaker Pro 6 that will be viable when the database is served as a web-page? I am trying to build a database with two passwords "sales" and "manager" and I want the user who logs on with "sales" to only see the price and description field while the user that logs on with "manager" would have access to ALL fields in the database. I have read some info on record-by-record access with instant-web-publishing but nothing about field-level. Thank you to anyone who can answer this or point me in the right direction.

Please help, I have build a database in filemaker pro 6 with 2 buttons each going to two different layouts. Button 1 accesses a layout that only members of the "managerGroup" can access and Button 2 accesses a layout that only members of the "clientGroup" can access. I successfully set two different passwords for each of the two members and the program works fine - "clients" can only see layout 1 and "managers" can only see layout 2. The problem arises when I serve the database over our company's intranet. When you logon to the database through your browser, you are prompted for username/password but no matter what password you enter (client or manager) access is …

Please help, I have just been handed the responsiblities of all our filemaker pro design and implementation and am completely new to the software. I have a couple of questions (probabaly very simple for you pros out there): 1. How do you build a layout in Filemaker Pro with "Tabs" that can be selected to led to different layouts? and 2. Can I attach different access rights to each of these tabs, such that an individual not allow to access layout for tab 1 can select the tab, but when he/she does nothing is displayed (except maybe an alert notifiying the user that access is denied)? Thank you for any help you can provide.

I would like to give users access to a set of databases based on a profile. For example: a European user has edit rights on all European records but has read only rights on all non-European records. And to make a little more challenging this user should have no access to Australian records. It should also be possible to restrict access to layouts which display certain fields. I figured out I need something like this set of db's: Users, Profiles (stores access to which layouts), User_Profile (stores region and links users & profiles 1:m), and for example Orders and Order_Items. If each user would have just 1 profile I can get it done. What I have not figured…