Security Concepts

Hello! I know how to encrypt text data. I was wondering if there was a way to encrypt pictures? The pictures are of people and identifies are to be protected. So, either I encrypt them, or omit the picture as far as I know, correct? Thank you. Pat

I have a few database working with the IWP and want to get the user to change their password at login, but all it gives me is the password has expired anyone know what i am doing wrong.

Trying to create privelege set with access to almost everything except "securty" settings. For some reason when I give all priveleges the "database" button remains grayed out. See attached image. Here are the privilege settings:

Hi all Is it possible to put together a "locking" script where the system will prevent a user from opening a record should another user be accessing/viewing it at that current time? A simple dialog box denying access and then exiting the script should do - but how would filemaker check to see if another user has the record open?

I have a letter merge file that comes with a few letter templates already completed that I don't want the user to be able to modify. They are free to create any other letter templates they desire. I just don't want them changing the ones I created. I know I can prevent deletion of the record by calculation. I know I can change access to a field to view only, or no access. Is there any way to restrict modifications of a field based on a calculation (eg if permanence = 1, they can modify)? Thanks for any suggestions! My apologies, I think I have figured out the answer to my dilemma!

We have a FileMaker 11 Server/Client environment, using Active Directory to authenticate users. I have a layout where a user would like to perform a find and export the found record set, however the Export command is greyed out. The user has the ability to view and create records and has access to all fields. He has limited Edit and Delete access based on if the record was created by him. His privledge set has Allow Exporting checked. The layout is using the FileMaker standard menu set. My Account (that has Full Access), can export records. I'm at a loss here and need some help figuring this out.

Hi, Is it possible to change a user's privilege set via script? The reason I asked is because I have created a "user management" for the supervisor to create manage users. Kindly look at the attached file and see if you could do something via script to change the privilege set based on the value of the "Privilege" field. Thanks in advance, Garu Users.zip

Hello everyone - new here, and looking for some knowledge. Let me start by explaining what I want to do - there may be multiple ways, or no way at all to acheive this. I have a database I have created. I have people who would like to use it. I do not own/or want to own there data/server. What I would like to be able to do is shut them out from using the layout/database if issues arise. Possibly make the layout authenticate monthly? The issue lays in the fact that I will not own or control their network or server. Help please?!?!?!

Hello, I'm trying to limit someone's access to only be able to edit/delete within one field in the record. I set up the equation to limit the access to this one field in both the 'Edit' and 'Delete' sections and it worked. However, when I login to that account, if there is already writing within that field it won't let me edit/delete, but if there's nothing in that field in a record it will let me edit/delete. How do I enable editing/delete within all the records? Thank you!

Hello, I would like to restrict access for a specific user group to records based on a specific value in a field. For example, the field is called Category in the database table Catalogue, and the value is Canadian and is part of a value list. I've gotten to the step of a limited records access which brings me to a boolean condition screen. I'm not sure how to write the Boolean condition. Any suggestions? Thanks!

i have buttons on a "splash" layout that directs users to specific layouts. each user has their own set of permissions. some permissions prevent users from viewing certain layouts - however if they click a button to access that particular layout, the NO ACCESS greyed out screen appears, and the application needs re-starting to use. i have written a script to verify the permissions to prevent this, however I want to clarify what permissions can access the layout: If [get(accountprivilagesetname) = "[Full Access]" or "[Privilege Set A]"] go to layout... else exit script the first privilege set is recognized by filemaker and permits the user to go to the layou…

Hi All. I was interested in implementing a user log in/out function into my database that would bypass the built-in security system, but I've come to realize the standard FM security system is the way to go. However, I want to track my user activity to some degree. Currently, upon log in, a new record is created in a "sessions" table which assigns a "session ID" and time/date stamps the log in, and stamps the user ID as well (get user function). In various tables the user can add new records, in which their user ID (a field with a get user function) is stamped. I want to be able to view all the record creating activity a user has. I believe it can be done, but I'm cur…

Good Morning All, I want to log a user out of a solution if no edits or creations are made in a specific time. Is it possible to capture a last modification time across all layouts that I can base a trigger on. this is a hosted solution, not served

I have a solution consisting of 11 related databases remotely hosted on FM11Server where I want to provide guest access for demos. I've gotten myself very confused about the proper security settings for this. All I want to allow the guests to do in the demo mode is to navigate from screen to screen using icon buttons attached to scripts which deliver the navigation. Is there a standard set of security privileges I need to set in each of the 11 databases for the limited guest access I wish to provide? Thanks

I want to open a file without asking me for password and username from my iPad device. can it be posible??? thank you.

Hi, I have a runtime solution with 2 accounts: admin and a user account. Now I would like to give the user the possibility to change the username within the runtime solution. I managed to change the password with a script but not the username. I tried to save the new username in a global field an then overwrite the username with the script step but it doesn't work properly. Thanks for your help Regards

Hoping someone has a solution to this: I have a contacts file for my sales reps. I would like to allow only the sales rep for the record (or administrator) to be able to change the Sales Rep field. (Only allow the current rep for the contact to change the record so another rep is listed as the owner of the contact). I tried setting up a validation for the Sales Rep field which checked via a calculation if the Get AccountName=Record Owner, then allowed them to make the edit. I had the Record Owner field a calculation which equaled the Sales Rep field. It worked, except once the Record Owner switched over to the new name put in the Sales Rep, then a validation w…

Management is looking for a simple way to allow CSRs to copy information from fields that are not enabled for "field entry" in browse mode. We are not concerned with security from malicious attacks or data being seen, but rater data integrity from modification by unauthorized users. The fields currently display specifications that should not be editable by most users. Currently that is achieved by unchecking the "browse mode" box under "field entry" in the inspector pallet. This has worked fine for us other then people can not copy the text to paste in other applications or emails. The request is to allow this to be done without having to work though perm…

I created a new database yesterday by copying an existing database and then making various changes. There were no apparent problems in either the parent or the copied and changed database. Neither of these required a password to open. Today, when I try to start up the copied and changed database, it demands a password. The original parent database does not. I do not believe that I made any changes to the security settings for either database. So there is no password that I am aware of. Anyone got any ideas in 1) WTF is going on, and 2) is here anyway I can open up the copied and changed database without having the non-existent password that is demanded? -Steve

I have a database the brings in the data using an external data source (MySQL) and I'm trying to create a privilege set less that Full Access that can access the data. Everything I've tried so far just gives you don't have enough privileges to do that (vague about what). I'm guessing with an external data source the account has to be able to create new records to populate from the source but what are the minimum requirements? Dani Roloson University of Waterloo

Hi Support, I want to set Full access permissions for few management users and read only to all other. I have followed the link below to create new user and assigned privilege to read only. Before creating user I have set admin password as well. http://help.filemaker.com/app/answers/detail/a_id/5845/~/creating-and-managing-accounts-in-filemaker-pro Now this user set as default for all users automatically, that is good in one part for me. Now on management users I try to open that DB with Shift key and it ask for the user name and password, as I enter Admin details, shows error that the user name password you entered does not have access to the file. …

Hi How can I create a new user and manege users that not in full access Privileges? Thank you Dani

Hello, I'm looking for a way to protect my DB. Ore by a kind of demo code that expires. And easily is reactivated on request. Most ideal for would be if i can lock the file to a machine. (incase sombody copy's de DB to a other machine / company) Any advice and do's and don't are very welcome.

Hello, Just started to use FM, built a simple database, with 6 layouts my question is: Is there a way to lock all fields but one in a layout to avoid changing data? I was thinking in a Radio button or a check box to lock/unlock the layout. I found a topic by Mr Steven H. Blackwell, that seems to be easy task but I could no perform at previlege level I would like step by step if I am not asking too much. Cheers,

Hello, I'm having an issue with running a script in an .fmp12 file hosted on FileMaker Server 12. The file uses external authentication, but also has an FMP authenticated "dev" account with full access priveleges. I created a script that has the Re-login script step in it so that I can switch back and forth between externally authenticated accounts and the Dev account. When I have the file saved on the desktop, the script works fine; I can switch back and forth between the Dev account and the FMP authenticated test account with limited access privileges I created. (the test account uses the identical privilege set as the externally authenticated accounts on the …

We are in the midst of tightening our security controls amongst a team of developers. Each of our file will have at least a Full Access account given 2 different persons. However, our main concern is it may take one disgruntled staff to cripple a system by removing all other Full Access accounts. Is there a way to create a new privilege set similar to Full Access privilege but this new privilege set cannot edit (or delete) other Full Access accounts? Thanks.

Hi, I wanted to make a account which can access to only 1 layout. In which he can add new records edit them or delete the. But the problem is that when i set privileges to disable every other table and layout expect the one that should be enable. Toolbar button on that tables is disabled too! I want to enable the toolbar buttons for that table. How can enable them from Privileges window? Thanks

I've got a FM solution that I distribute as a runtime. I have 2 accounts included with the runtime: admin and user. Our users use the user account, and the first time they sign in it has them set their own password. This all works fine. People forget their passwords, though, and the only answer I've had for them is to uninstall and re-install the software. Obviously, this is not ideal. I'm looking into this a little more now and I see there is a script step for resetting an account password. This looks nice, but we'd still have to be signed in to some other account in order to get access to the script, right? We could at least do a screen share with the p…

I need to lock a record when it is finalized. This is a FM9 application. I have never run across a need to lock a record in the past. TIA.

I have recently inherited a File Maker database. I have access via my username and password but do not have admin access to be able to manage the database. The gentleman that set up the database is no longer with the company and I have been tasked with creating new users and importing external data. Is there anything that can be done?

Hi gang, I have some complex privilege sets and need to know how can I print out all the setting for future reference and the manual? I started to write them all down but there are so many screens and fields set to yes/no and I can make a mistake. It must be possible to print. Am I missing the obvious? Thank you in advance for assistance.

Scenario: FMP 12 is running on an iMac that is shared by several people, each with their own FMP logins, and we have added the "Re-Login" script to the File menu for this purpose. This machine is also accessed remotely by other FMP users, sometimes by the same people who use the machine locally. So, FMP always needs to be running for remote access. Question: For security reasons, is it possible to create a script that will initiate Re-Login after a period of inactivity?

I'd like to be able to create a history log which would include the following: -Changes made to records by user (not just when last modified, but all changes) -Layouts visited by user -Login history by user There was a Microsoft Access solution I saw that had this in there so I know its possible to do it for Filemaker since FM is way better than Access. Thanks!

Hi, I have a script in Filemaker 12 and want to check for privilege before proceeding with rest of it. It looks like this: Set Variable [ $AccountPriv; Value: Get(AccountPrivilegeSetName) ] If [ $AccountPriv ≠ "Accounting" or "Order Entry & Invoicing Master" or "Database Admin" or "[Full Access]" ] Show Custom Dialog [ message: "you do not have privileges to delete this..."; Default Button: "OK", Commit: "Yes" ] Exit Script [ ] End If Can I not check against multiple privileges like this?

Any tricks out there to conditionally lock specific fields (not entire records or layouts)?

So we've been using a custom IWP database for a while using Filemaker Pro Advanced, and setting it up to allow only certain IP adresses to access it is as easy as pie. But our needs now require Filemaker Server Advanced, as we need to allow more users to access the datatbase, but I can't find any info on allowing only certain IPs and blocking other IPs to access the file. I've installed FIlemaker Server Advanced 12 on a new Lion Mac mini Server, and would greatly apreciate any input of how to only allow specific IPs to access IWP, ideally what is the best way around this, should I use the Firewall or edit the Apache files. Whichever way is best any clear instruc…

Hi, I have created the Database in FileMaker and Made some accounts for clients usage. But i wanted to make the some rule changes so the client can also make an account. But not with Admin privileges. My question is can i give permissions to the client. so, he can make normal user accounts. But can not change the layout and other database settings?

In my Filemaker solution, I have 2 types of users. Students and Teachers. I have made a login script that checks a users table for the username and password. The plan was to record in the users table, an admin approved name for a privilege set: Students get "Read only access" and Teachers get "Data Entry Access" My questions are: In order for a user to login as a "Student", Should I 1. Manually create a filemaker account called "Student" with [Read-only-Access] and then using the script step "Re-login" using the account "Student" ? OR 2. If the username and password matches, create an account using the script step "Add Account" using the use…

Is there a way to do tab level security other than to put a script on a tab to check security privileges?

The Open File script step has the following option: • Open hidden causes FileMaker Pro to open and hide the specified database. What does this mean? Hide from whom? I can't locate any explanation in the documentation or on these forums. Thanks for any help.

I have a database where most users will be accessing as read only. I want to have users login instead of using the guest login, and would also like to restrict the scripts and layouts they have access to. I tried duplicating the Read Only privledge set and modifying it, but it seems if I change anything, the user can no longer modify global fields. If they login as a guest, they can access the global fields with no problem. What am I missing?

I could do with a script to export all user names and privileges to a text file for an access review. Anyone know of a way? Cheers

Hi, I would like to show last login time of a user where my account details exist in layout. Kindly help to resolve it. Thanks in advance.

Hello, I am a novice as far as Filemaker pro is concerned. I have created a database with a lot of questions for students to use. I am now trying to install the database on a computer so that the students can use them. However, I want some of the questions to be accessible to them and the rest of the questions that are locked away so that I can use them for teaching when I need them. To enable me to do the restriction, I have tried to create a field regarding availability of the question and said - available or unavailable to each of the question. So that I can sort which questions should be available to the students. Based on this field, I have then tried to…

We have an application which we will be deploying via Terminal Services, with multiple users accessing a single server located remotely. # of users is between 250-300 so we don't want to do it manually for them. How can we automatically configure preferences so our users: 1. aren't notified when there are updates or a new version (we'll cover them from corporate) 2 set memory to 256 3. set default font THanks!

I would like to completely remove the username/password from a couple of my files because I am the only user and the files are stored on my hard drive. I say completely because I have tried to do this and manged to remove the password but the dialogue box still comes up and I need to enter a username.

I am new to FMP and database development. I created an account with data entry privileges only, logged in as that account to see how it works and now I am stuck in my database as that user with limited privileges. I cannot get back in as Admin with full access. How do I get to an option that lets me change the account user back to admin?

Hi All, Here is my situation. I have one machine running the master database. I have 5 other machines that open that DB remotely. I have created a username and password for each machine. Laptop1, Laptop2, etc. When someone makes a change to a certain record, prints an invoice for example, I need to be able to see which machine handled that record and when. I am sure there is away to do this, but I am a coldfusion programmer by trade and I am just starting to develop in FM. Any help would be greatly appreciated. Thanks...Mike G

Hello, Is there a way to set privileges for users such that they can cancel out of record creation (delete the record) when they started one by accident, but still not allow them to delete other records which have already been committed? For example, a user accidentally clicks on "New Record" when they meant to click on "Find". Now they are stuck trying to get past the required field messages and can't get back to what they were doing until the new record has been committed. Is the only way to have them complete the record with bogus data and ask the admin (me) to locate and delete the unneeded record? I don't want people to be able to override the data valid…

I am setting up a custom privelage set for a run-time solution that I have created. There is only one field that I don't want the Client to be able to edit. After selecting 'Limited', I am prompted with a calculation and I just really can't work out which calculation is applicable to stop the user editing that one specific field? On that note, once I publish this run-time solution, is there any way for the user to begin using the solution without the login screen (without a password) yet with the custom privelage set that I have created (Not Admin). Or does it do that by default? Thanks so much.

Couldn't find anyplace else for this. When you start a FM application on a particular machine, there's a place to set the login name which will come up automatically and then you have to enter the password. This login name is the same regardless of which application you open on that workstation. Is there anyway to make it dependant on the application. We have different login names for different applications. Doesn't look like it but I figured I'd ask. Mike

Hello All I have some auto run daily scripts that update using task scheduler and FM. Basically, the task scheduler opens a FM file, the file is set up for running script X when the file is opened. Script X runs a script that is on the FM server. Most of these scripts are not server compatible. I have a new one to make, and there is one hitch, permissions. The new file that needs to be updated has user names, and passwords. Is there a way to store this in FM, and pass it to the file when it opens? I have tried making a new privilege set based on the default client name from FM. Any Ideas? Gil

Im running a db on my iPad to tracking students projects. Once a project is "closed", I must protect the evaluation fields. Used an old script called "Lock evaluation_field". If (table_status="closed") Show Custm Dialog ("Sorry, cannot change the evaluation") Else Go to Field (evaluation_field) End If Well, the script lets me to alter the evaluation anyway. It doesnt lock the field. I think this script worked for me in the past for FM 10 Pro, as I pointed it out. Please help me to refine this. Many thanks once more :)

I have a two file solution, based on the data separation model, and am trying to deploy it via FileMaker Server 12. I've set up a custom privileges set in both files and applied it to the group "FMProUsers". However, when I try to log in as any of the users in the group I get the error "Your access privileges do not allow you to perform this action." This happens when trying to login to the interface file or the data file. I've tried assigning Full Access privileges to the group, and still get the same error. I'm also getting the same error for accounts authenticating via Filemaker with permissions other than Full Access. (i.e. only full access privileges w…

I've been using my own UUID function for a while, so I was eager to see how it and other UUID solutions the FileMaker community has developed compare to the new Get ( UUID ) function. I put a test file together, and I encourage anyone interested to download it and run the tests for themselves in case someone runs into something I didn't, or in case someone just doesn't believe me. (I chose not to use any sub-second timing, like FMBench, for portability reasons, though I'm sure the results would be interesting. Here's hoping FileMaker 13 supports "SetPrecision ( Get ( CurrentTimestamp ) ; 6 )".) Here's what I found: 1. Get ( UUID ) calculates very fast — its performan…

full access account into an filemaker file ? :hmm:

Hello, everyone. So, recently I've been doing a fair bit of work on some custom web publishing for my company. Now I've gotten to the point where I no longer want to use my default test account that automatically logs in (hard coded username and password in my PHP files (no, this is not live yet)). I would like to start working on a login page, but I'm not sure where to start with my solution. Here's the problem. My CWP often uses AJAX to perform the calls to FM Server. As such, the PHP file that actually connects to the server is never located on the client devices. I need the clients to be able to log in (to verify they have access to our system), then be…

Hello, I need a solution to be able to have the public visit my site, and create their own user accounts, passwords etc. I'd then like to publish certain layouts and have the users use their supplied authentication information to view them. How can I do this? Thank you in advance for any help.

Hi I'm designing a database where I'd like to hide records. A user logging in will be externaly authenticated against the company AD which works fine. In this way I'm able to control record level access that the authenticated user only has access to his own records. So far so good. But how can I manage the access rights that all emloyees of a department - they all have individual logins - can see and edit the records of their collegues? There are also supervisors and managers and they should have of course access to the records of more than one department to have an overview. I thougth about a related table where an admin can enter the departments an employee is all…

Hi, I am desiging a database that will be used by our staff in various countries on various platforms (iPads/iPhones/computers). I want to make the layouts and menu items only visible and accessible based on privilege set and their platform, but without cluttering the Layout Menu. I would appreciate if anyone can offer some advice on any possible improvements to my design. My database has a range of tables (e.g. contacts, intelligence, events, correspondence), as well as a couple of privilege sets (e.g. Manager, Director, Big Boss). Not all tables are interesting to everyone, and some are Big-Boss-only. The database is hosted on FileMaker Server 11. The dat…

Hello, I’m trying to create a way for non-developers users manage the record privilege set. Picture: a database with multiple users and all of them with different access level. The director of human resources can give privilege to a particular user or a group of users to be able to VIEW, EDIT, CREATE or DELETE some records in a table. And in this database the only person with full access will be the developer, so the director of human resources must be capable to change the record privilege set at frontend. I have done 80%, how: 1. Just one privilege set for all users; 2. For view mode I did a script to prevent layout access. I think this is better…

A client of mine is running FPF11v3 on 4 machines on their network, and they individually access FMP databases on a network folder on their server, with only one of them opening the database at a time (not shared). This has worked well for the last year on 11v3, and previously on older versions of FM. Today, their office administrator got the following error attempting to open the database: "The account and password you entered cannot be used to access this file. Please try again." Rebooting everything did not help. The database can be opened from another installation of FMP on their network. If I copy the database to a local drive on the off…

I need to disable peer-to-peer file sharing among my users and force them to use the FileMaker Server for all file sharing. Does anyone know which Windows Registry keys can be used to permanently disable P2P sharing in Filemaker Pro client? Thanks!

Not sure where to ask this, but it's database access, so here goes... I'm going to have 10 in-office users accessing a central FM database (not Server) plus another 6 occasional users. I'm assuming (not seen this happen yet!) they will all be using 'Open Remote'. Going to the menu or using the shortcut and being faced by FM's techie-looking connection dialogue box, doesn't seem to be a nice way for them to start the day. As they will always open the same 3 related databases, is there a way I can automate this process eg: by clicking on the databases, say in the Finder's Sidebar or Dock, they launch via 'Open Remote' without further request.

I looked on the FM website regarding changing a privilege set while the file is being served and read this: "However, one user can define or modify accounts and privileges while another user is using them." I took this to mean I can modify a privilege set on a server hosted file, whether or not someone is logged in. I went to my hosted WO.fp7 file and went to MANAGE>SECURITY and went to change the privilege sets (I had "over done" the security and needed to make some things viewable). I made the changes and closed the file. When I opened the file to test, I still didn't have access. I opened it again as [Full Access] and the changes I had made were gone. …

Hello, I currently have a FileMaker application that I can log into, however I'm not able to log in with "Full Access" to the primary portion of the application. (The default database that is loaded, I have Full Access to a couple of the child databases that get proc'd by the default one, but I need to make account and application changes to the main one.) Is there any way to force a password reset on a known "Full Access" account or create a new one altogether? Thanks

Hello, I am trying to find a way to keep my users from having to log into multiple related files. I have over 100 users in one file and have now related this file to another existing file. There does not seem to be a way to migrate account information from one file to another, so I thought about using guest access. I would say about 75% of the users do not need access to the related file, but are constantly prompted when going to do a sort or export, for example, to log into the related files, for which they must enter "cancel". The other 25% of the users do need access to the related data and have accounts in that related file. Unless users do something suc…

Hi, I don’t understand what’s the point of all this security steps in other to create a database with separation model. In data separation model we have two or more database related. And both of them should be protected, situation which cause a big confusion for frontend user, because they must login in both of files. This means, if you have an UI and 10 data files, the user should login 11 times. In other to avoid this, the developer just protect one file and the others not “very well”, like Matt at ISO Magazine shows in his videos. Shouldn’t authorization in file access be enough? If the user have access for both files (same password and username…

Hi everyone! I'm new to FileMaker, and have a philosophical question regarding security. We plan to implement a single database (on FileMakerServer) of sensitive information (think sales leads). Each lead will be assigned to a sales rep. We want to then distibute the DB in Filemaker Go format to our sales force, all of whom have iPads. We want each sales rep to see only his/her leads. The question is - should we send the entire DB to every sales rep and use programming/admin techniques to try and restrict access to only their records, or would it be better to send a subset of the data to each rep, the subset being only their leads? Would it be easy to p…

Hi we have an application deployed on Citrix. We didn't install the Citrix environment, but the problem is that now every session starts FileMaker with the username "Windows User". The problem is that this is not really practical So we discovered that when we create a new Citrix User, FileMaker asks on first startup what Username he wants to use. So for new users we specify a different username, and apparently this username is stored somewhere in his Citrix environment. So where is this "Username" actually stored? I found out that your favorite hosts/files are stored somewhere in the registry in your user settings on WIndows. Is this the same for the User…

Hello, I use FM 11 Pro Advance to develop FM-based databases. One of my greatest concerns is how easily the Accounts / Passwords of FM-based databases can be unlocked with applications like: "FileMaker Password Recovery". Here I am not talking about being an expert hacker and using aby "brute force" approach. Just get the application and you can unlock an Account/Password protected FM-based database. Maybe I am missing something and there is a way to prevent the "FileMaker Password Recovery" application from figuring out Accounts, Passwords and enabling you to modify the passwords and have FULL access to an FM-based database. If there is a way to …

Under what circumstances is the admin account (with full access privileges) denied the right to delete records? I am running a script (as the developer/admin) to delete all records in several tables but not all (ie: I cannot create an empty clone). It does the job in most tables, but errors (Code 200) in 3 of them. I cannot manually delete records from any of the 3 tables either (being warned that I don't have the correct access privileges).

Hello everyone. I'm working with a database that includes 4 different companies, each company have a group of tables, several are related tables between different companies. I am considering to give access to the different users to each company, in this case I don't want a particular user to be able to enter on some tables. Is there a way to do it? i could separate the database into smaller ones, one for each company and could re-arrange the relational database to work this way, but if I could manage the user privileges but will be easier. What do you guys think about it? Thanks a lot for your help! Milko Migneco

I have 2 related databases ‘Jobs’ and ‘BA’. Both have the same privilege sets and users. ‘Jobs’ asks for login credentials when launched and opens into the ‘home’ layout. ‘BA’ opens into a small layout/window called ‘Login’ that only displays a couple of buttons. If either is clicked, Relogin is the first step in the script. Users are asked to log out whenever not using either db. Clicking the ‘Logout’ button in either db, they are taken to a small ‘Login’ window and the ‘Logout’ script uses ‘Relogin without dialogue’ to put them in an account called ‘Logout’. The ‘Logout’ account has its own privilege set with very few privileges. Now the proble…

Is there a way to allow a senior employee or middle-manager to assign new accounts, to existing privilege sets, without granting that person full access privileges?

In some articles Steven Blackwell tell us the risk of using an opening script to perform some security in our databases, but what is best solution in other to perform the same procedure: 1. Using a startup layout without data, buttons or other things. This is showed in ISO Magazine. So if any user tries to cancel the open script it goes to nowhere. 2. Create a privilege just to see the startup layout and a button in startup layout to do all magic, change the user privilege to other and make the activation.

Hello, I use FM Pro 11 Advanced to develop databases and I would like to know whether I can use it to develop databases with External Authentication. I would ask it in a different way, I know that I can use FM Pro 11 Advanced to develop a database with External Authentication. All I have to do is to assign each Privilege Set to a particular Group Name and make sure that the created Group Names match to those stored on the Server OS. But what I don't know is whether the Group Names, created with FM Pro 11 Advanced and not with FM Server 11 Advanced, will be recognized by FM Server 11 on a server. My apologies if my question sounds naive. Thanks, …

Hello, When developing an FM-based runtime application, preventing access to the database structure and scripts is an essential prerequisite to me. Password based protection doesn't seem to be very effective, since the passwords can be figured out if the user has the know-how. My question is: by permanently removing adm access from files, when creating the runtime application, can I be 100% sure that nobody, no matter his/her skill level, will have access to the runtime application database structure and scripts? Are there any other valid alternatives? natursalus

For enormous of reasons there are some values or calculations, that need to be hidden. And only developers should be able to look over those values or fields. But how can we do this, if dataviewer can watch through the keyhole? It’s possible do prevent this behavior for Filemaker advanced clients? Regards, Caps

Hello, I am in the design stage of my next project and need some advice about how to grant selective user access. Let's say that I have Form A, based on Table A, that contains fields to be filled in by different people, based on their user access priviledges. There are two coexisting scenarios: Form A divided in sections accessible as per granted user access priviledges. For example: Section 1 can be filled in by all users. Section 2 can be filled in by user with supervisory access level. Section 3 can be filled in by user with managerial access level. Form A section accesible by users with different access priviledges. For …

Hi, Having recently purchased a Filemaker Pro 11 license, I would like to setup a copy on our office server that opens a single database without any user interaction. I can easily manage launchctl on Mac to make sure the program is always running or started on boot, but I'm unsure as to how I should manage users and passwords. I want each user to still have to put in the username and password when connecting to the remote server, but I want the database to open on the server without any interaction needed. If I create a password-less account for loading the database, I wouldn't want anyone else to be able to login using that account. What are my options? Ca…

I just finished setting up a very basic Work Order control DB. I am trying to ensure that all work orders used get either billed or canceled. I have only created 5 or 6 FM DB in the past and the server and user security settings are always an issue for me. Basically, what I am trying to obtain is that User A to be able to click the buttons that will generate a Work Order number for either series, but User B cannot. Also, I have a layout that shows all unbilled Work Orders (only shows records with empty Bill Date and Cancel Date fields) that both User A and User B should be able to see and search and sort, however I only want User B to be able to enter information in the B…

I just made a database from the Contact Management starter solution, uploaded some contacts, added a couple of table occurrences for conditional value lists, and everything works....but then I created a user account, and tried logging in and it won't let me! as soon as it validates the username/password, this error comes up: and then it boots me back to login. I cannot open as a guest, or as a user with data-entry-only privileges. I haven't messed with any of the privilege sets! It's the template security settings! how do I troubleshoot this? there must be some script that's running on login that is beyond the user privilege set right?? agh and I'm supposed to …

Hi Our online team is requesting to have readonly access to FileMaker databases(v9-10) but wants to see schema(May be relationship, table structure & field details), so how I can provide that level of access? Its also bit painful as there are around 36 databases. Well, 12 databases needs separate account setup but other 24 have integrated solution just to provide custom readonly, dataentry & admin access to all 24 databases. So asking help from the experienced FM gurus who faced similar scenarios. Thanks in advance.

I thought I understood this reasonably well, but it seems not. Until recently we were running FM Server 9 on a Mac Mini, but when the Mac Mini died we were forced to switch to a fileserver running OSX10.7, which meant we needed a new version of Server. That costs a lot of bucks. I am trying to handle it with only regular FMP11 apps instead. Here's the current set-up: I have about half a dozen machines all running FMP 11. The fileserver is running FMP11. It has a couple dozen databases (DBs), many referencing each other, and makes them available on the office network to the other FMP11 apps. I open all the databases on the fileserver with a username/pass…

I have no password on the overall database but I would like to password protect just 1 layout for management use. Is there a simple way to do this? Thanks Matt

I develop in OSX Lion and produce a runtime in Windows Vista. I am running FMaker 11 04 ADVANCED. The OSX source solution runs without any security or login requirements. After I produce my runtime application in Windows, when I startup the .exe file I get this dialog message: " Please enter your user name." It doesn't matter what name, if any, I enter. Everything runs normally after that. Question, "Why is that dialog appearing in the runtime but not in the source app?

Is it possible to change the permissions to disallow the user from creating a record in a particular layout? I don't want the user to be able to create a record that isn't immediately linked with a record in my second table, so I have a portal in the second table's "detail view" layout where they can add a related record.....but I want to have a "detail view" layout of the first table that shows more fields, but won't allow record creation. I have a table of companies, and a table of contacts that's linked via an ID# field. The user can add a contact from a portal in a company's record in the layout "company detail view", but I DON'T want the user to be able to add a…

Truly there is a simple answer for this, but it is frustrating me trying to figure it out... How can I have each user who logs in on their individual computer have their name automatically show up in the user name field so they can enter their password. My name keeps showing up as I have registered each seat. I am using 5 seats and FM11 from our server... Much thanks! Dr.L

Help, I'm looking for a solution for utilizing the famed 1500 form for my practice...any ideas/solutions out there. I'd really like to incorporate it within my existing FM solution... Thanks all! Dr. L~

I have implemented a field based record edit lock using the regular privileges, but the message it provides to a user who tries to edit a locked record is rather cryptic ("your privileges do not allow this") Is there a way to trap a privilege failure and offer a better dialog/user explanation? (like: You cannot edit records fro jobs that have been completed. Contact your supervisor.) Thanks in advance, Justin

I have a few employees accessing our database either on the local intranet or via web publishing, each with their unique account. Each one has his/her layout in which to enter data. Is there a way to allow each account user only to be able to access their layout? I have created a layout for each of them with different fields to enter data into. I am having the problem that if I am on the main layout when they open the file, it opens on their computer in the layout I am viewing, and they are not savvy enough to switch between layouts, even with buttons I have created. Thanks in advance for your help

Does anyone know if there is a way to allow exports, but to limit what fields can be exports for different privilege sets? I'm creating a runtime solution and I would like to give my users the ability export some of the data to excel. But in any given table, I have some data that is used for authentication that don't want users to ever be able to get access too or I'm compromising security. I'm using FileMaker Pro 11. Best, Rob

I have a mac mini server (2011) that came pre-installed with Mac OS X 7 (Lion) Server. I want to run FMP 11 Server on it. I'm not running/serving any of the server options so they shouldn't be conflicting with the FMP 11 server install. I have Filevault 2 (FDE) enabled because I want the server to be safe even if someone stole it (powered down of course). I'm updated to the latest release of FMP 11 Server and I know that only local sharing works with Lion (and I've gotten it working fine with lion client). Here's the thing... it appears to all work ok at first, but the admin console is unusablly sluggish even when working and inevitably freezes completely (with the …

I have a Filemaker solution for creating purchase orders in my company. Currently, all users who are authorized to create POs have Data entry access. I'd like to improve the security, so that records cannot be accidentally edited after they are 'locked'. I'd like the users to be able to turn this feature on/off, as in make the record editable or not. This will require an intentional step before they can edit, thus eliminating accidental editing. I created a boolean field named 'locked'. I changed the security so that editing is limited to 'locked=0'. I'd like the users to be able to change this 'locked' field from 0 to 1 (and vice versa), so that they can edit…

Hello, I have an appointment delegation system where employees can login and view any appointments which have been assigned to them as well as their managers being able to view themselves and their teams appointments and employee details. What i wanted to do was have a button which when clicked, took the logged in user to only their employee details and didnt allow them to view any others and i thought this could be achieved through some kind of find script but i am struggling to do it! At the moment, I am still desgining the database so things can be changed. I am using the employees full name as their login name and i know this isnt ideal, i would like to…

Is there a way to prohibit access to data viewer in a runtime ? I have created a runtime without administrator account and almost no menus. Everything is controlled by buttons to navigate, print and make a copy of the database. However, I found no way of hiding the Data Viewer sub-menu, which allows any user to see all of my fields names. I removed the administrator account to protect the construction of my structure, but this is an open door to peek inside !! Why did the folks at FM allow this for non-admin accounts? Do we have to go in Kiosk mode to hide the Data Viewer ? (FM 11 Advanced)

Is there a limit to the amount of accounts that can be created within a FM11 client database? Thanks Stuj1026

I've looked at several lock field solutions and not found one that solves my problem without a huge amount of work/number of extra objects. I have 4 layouts (RA, FA, RO1, RO2 / table = RAFARO) displaying over 200 fields between them (2 layouts contain several tabs). There will be one privilege set with 20 users. The client has just told me that he wants a tick in the 'Job Completed' field (in another table) to lock all-but-one of the 200+ fields (he didn't tell me that before!) and, believe it or not, the job can be uncompleted by unticking (unlocking all fields). Is there a whole record locking method that allows for a single field to be left unl…

I have a solution which several customers have their own, identical, versions of. As I continued developing the system, I need to find a way to keep my clients accounts on the live files, in line with any new files I distribute. Are there any recognised or recommended methods for copying or importing user accounts from one file to another? Advance thanks.