Security Concepts

Hi.. I have a database at my store, collecting the orders of my clients. When an order is done, I need to restrict editing. This is not the difficult thing. What I actually need to do, is to be able to edit it, but only by a higher user. So, when someone wants to edit an order, he needs his supervisor to come and enter a password, do the change and lock again. But I need the administrator to know both the old order and the changes. I thought about duplicating the record and using a flag field that would be activated on the old one when this happens. So when I want to print, list or whatever, just omit these. But this means creating all the related fields as well. : Do…

Hi all, is there a way to create a log of all records deleted

Is there a way to set up a file where I can allow a user to import a table from a file in which they don't have full acces privileges? They have complete access in the file they would be importing FROM except for some scripts, but they are not able to import a table into the new file. Shouldn't this still work?

I'm pretty sure the answer is "no" but I for some reason I thought extended privileges could be used to combine different privileges into one. That is, let's say I have: Privilege 1 => access to field 1 Privilege 2 => access to field 2 Can I somehow create an extended privilege combining Privilege 1 and Privilege 2 so I don't have to create a new Privilege 3 for an account to be able to access both field 1 and field 2? Thanks in advance!

in FMA11, how do you change "Filemaker Pro" in the custom validation box? Afterall these years, do i need another plugin?

Is there a way to disable the drop down menu "change password" option for individual accounts AND for the admin account? Thx!

I am getting error 808 "access privileges have been damaged or tampered with.." etc. Is there any way to circumvent this error, or any method to get the data out of the tables in the database?

i create runtime demo for my clients, within a week, somehow i found it running around the internet cracked open. how the heck can this happened?

What is the common procedure/structure for implementing a users management table inside a solution? (not using external server to authenticate) I mean, if someone would like to use a custom login screen as well as provide a custom UI for the management of accounts and users (add/delete, reset passwords, assign privileges etc)? What aspects of security do need to be considered? Can anyone provide a complete model for that?

Hello. I just updated my version of FMP to 10 today. There is a field in my database that previously I could edit the contents of but now am getting the message "You do not have privileges to modify..." According to the Accounts and Privileges settings, the account I'm using should have full access to edit everything. What am I missing? Thank you very much for any assistance.

Is there a way in FM 8.5 or later that will prompt a username/password entry after a set amount of time of non-use at a client workstation, say 15 minutes?

Hi everyone, I have FileMaker Server authenticate against Active Directory. The users have to enter their logon credentials when they log in to FileMaker. If I close FMP, open it, and log in with my admin credentials, it still acts as though a read-only user is logged in. Are the Windows login credentials automatically passed to FMP despite what you enter when logging in to a database? Is there a way around this or is it by design? Thanks in advance, Jeremy

Was about to post this on wants and wishes, but will ask here first: It sure would be nice to have a way to allow a User/Adminstrator access to a filtered set of extended priveleges, such that they could set their own users settings, but the developer still has control to filter out the full access or other sets designed for the developer only. Possible today?

I am a newbie who is creating a applicant tracking system similar to OpenCATS (www.opencats.org) for my healthcare staffing company. How should I go about setuping up and limiting access to the portal designed so the applicant can maintain their own resume and other related data? Currently, I have a web registration form that the applicant uses to register with my company The registration form collects their username and password which post to a "Users" table. The "User" table has the following fields: k_idUser, UserID, Password, Role, Permissions, CreateTimestamp, CreateDate, CreateUser, CreateIP LoginDate, LoginTimestamp, LoginIP. I have separate tables fo…

I have a set of users that have custom privileges set so that they can create & view records in a table, but they are prohibited from editing the records. If the user is browsing records and attempt to edit a record, they are prompted with a proper error message that they do not have sufficient privileges to edit the record. However, if they create a new record, they are subsequently able to edit the record until they log out of the database. Is this how the restriction is "supposed" to work?

Several people printing different forms.I want to be able to see who printed a specific form. Ideally I would like to be able to place in the form layout a field that corresponnds to the user that is loggen into the FM application. e.g. If John logs in with his Account Name and password - whichever form he prints, his name will show up at the bottom of that form, if someone else prints the same form, their name will show at bottom of the form

I have a Networking question that may be obvious to Security Admins, but not so obvious to the rest of us. I have a distributed FileMaker solution that communicates back to my server over a Wide-Area-Network. The customer network has a hosted solution running on FM 10 Server with a secure firewall which has an HTTP Proxy filter turned on. My Sever resides on my business network which is also fire-walled, but I am not using an HTTP Proxy server. My server IP has a Public IP. I have provided my Customer with my Server IP and the IP of the Public URL to enter into their HTTP Proxy filter list. Here is the problem. When the customer network initiates a script from …

I'm new to this forum but hope someone can clarify something that I am working on. I recently found a solution in Advisor magazine from 2006 for a security system. I put it together and read over ever detail but found it omitted some information to complete it. It is made with local scripts for each file and controlled by scripts in the Main FIle. It is a 3 part series. Normally there is a file download but not in this case so I can't trace down the problem. Is anyone familiar with this system? The system uses Table Occurrences in each file based on the main file fields. I am having a hard time understanding how this works. I've deconstructed the system and understand ev…

We have been playing with the add account script step (keep in mind my script knowledge is limited) but I think we are missing something. I would assume that the step should allow someone with admin rights to add a user using the script. However, what I am seeing is that you must first enter the persons username and password before you can put it in a script, and then the script will activate the person once clicked. To me that serves no purpose, and is actually more work, if I am going to do that then I will just do it "Live" and add the person when I am at the computer via Manage/Security. Is there a method to allow a scripted addition of a user? …

From the feature page quote: Plus prevent your databases from being opened with previous versions of FileMaker Pro. I'm reading a lot into this, but is there anyway to know if this prevention feature would also prevent a hash replaced file from opening. I guess what I'm lookin for is some assurance that there is some new encryption that would prevent the detection of hashes, if the file was saved via FM11. Has anyone tested these new security features, are they still leaving a .FM7 file vulnerable to existing cracks if it has been saved via FM11 and set to open only with FM11? I'd love to hear that by checking this option a new level of encryption is us…

Hi everyone, I have a database that I publish on IWP. I would like to prevent people from printing the page. Any ideas on how to do this? You can set this in the user priviliges but that doesn't seem to work for IWP. I noticed that some "hidden" fields print on IWP but this is browser dependant. If it was universal I would have put a large hidden field over the existing fields. Not sure what to do but would appreciate the help. Thanks!! Randy

I have created a database and published it using IWP. I want to sell subscription access to the database, which is easy to do on my website. The problem I'm running into is getting user info from the mySQL database that runs my website into the filemaker database. Or, filemaker says you can you an external mySQL database to authenticate users. Can it be my website database? That would be perfect, but nobody seems to be able to tell me how. Or, filemaker says it can restrict access by IP address. Is there a way that IP address could be my website? That would also solve my problem. Thanks for any help, Steve

SO, I'm working on a database where the staff permissions are controlled by filemaker. I've set up a pretty sweet database and then I was automating an account password change dialog (with dialogplugin) so that I could have the password typed in by the user saved in the staff table and also added to the filemaker permissions. When I ran the script for the first time I changed my password and a dialog box (that I had set up) came up saying that my old password didn't match the old password in the FileMaker accounts. Now when I try to login to make changes to my database I am locked out of making changes (because only my user was authorized to make changes). I kno…

I work for a DoD agency and my Filemaker solutions are being challenged by an impending need to grant access based on a user's Common Access Card (CAC), which is a physical card with a chip. The user is asked for a pin, which the card validates (three tries & then the card is locked)and there is some sort of PKI certificate that gets passed? Has anyone dealt with this before?

Hi everyone I am currently trying to work out an access privilege scheme for a medium sized DB project. There is a number of user accounts. By means of DB tables the corresponding account names are attributed to usergroups (tables [color:green]Users and [color:green]UserGroups). These usergroups are then attributed via an m:n relationship (intermediate table [color:green]WriteAccess) to another table with sensitive data. (table [color:green]SensitiveData) See the simple DB scheme attached... The idea is that I use the calculation dialog box available for limited custom record privileges to decide whether a user gets write access to the sensitive data. …

I have a file that i want to password, I have set privilege sets, The basic privilege set, I have a field that has their name in it and if their name is in the field then they can view that record. That part of my set works fine, were i am having trouble is I have multiple tables but I just need to be able to edit one table and view one table. I have one table which is Student and I have another table form, In the Student table I need to only view certain students that relate to a teacher, again that one I have done, along with being able to edit certain fields. Like notes and such, I have another table in which i want them to view the table and be abl…

I have a script that is triggered by a button. I put an if statement in the script so the script would only run for users with full access. see attachment Exp1 The scripts fires for all users no matter what the privilege set. (I have limited record access to other users, However I wanted the script not to fire so this window would not open) On the other hand when I use the script (see attachment exp2) That script worked for only those with privilege set abbotts. The behavior I would expect. The issue is "[Full Access]" vs a custom privilege set name. When I first created this script (possibly back in FM9) it worked as expected using the…

My FIlemaker application needs to access external filemaker files to lookup and post data. These other files are managed by another developer who provides me (and other developers in our group) with login credentials to connect our files to his file and read/write the data as needed. So I need to open his file (it opens with a restricted logon account by default) and run a script in his file "login ( username , pw )" which I pass the credentials to, and it does a relogin with those credentials. The problem is I don't want to hard code the credentials in the parameter, because then they appear in DDR reports (which we are required to create and place in a folder on th…

I want to have users log into database with user id, and they are then presented with their own record which they can edit. My way of doing this is rather convoluted, and I always thought it would be something straightforward using get(accountname). However, get(accountname) returns the account who created the record (which is always done by Admin), and not the user logged on. Is this correct? I attempted a script that checked whether user id matched get(accountname), but always got no match. So. is there a variation of the get command (or something else) that allows me to find the user logged on and not the user who created the account? Thanks for any help (…

Hey Guys--- I have been looking on the board and still no luck. Hopeful someone can help me out [deadline approaching]. We have a solultion here, created a timesheet db for the Accountant here. with a layout with 150 relational fields with 4 critera and some calc fields. Each Record is Each Person in the Employee DB link as a Rec ID Staff (a number). All the Relationships are working correctly and all is working fine so far. My Main issue though is creating a startup script that looks at the username login, if the login name is staff then limit all records but that user. using a find? or Privillage/ or both. I was also seeing if I need to set a $vars..…

I have just upgraded from a single level design to a multi-level and just finished importing the data, etc. Is there a method to transferring the Accounts, etc. from the old to the new?

A proper understanding of the proper relationship between file UI and data security is an important item for FileMaker Pro developers. I would recommend a review of FileMaker Tech Info 5671 found at thefmkb.com/5671. Steven

Hi ! I have 2 different files on server. Is it possible to some how pass user information from one file to another ? I mean that account is created to both files with one session and both shares the account privileges etc. Is possible to use a third file ("Personnel file") that contains that information and is used by the other two ? I have no idea how to use "External authentication"... Thank you in advance !

I have a xsl page that contains a list with all the records in my database. This is a public page that everyone can view without logging in. For this I've enabled the guest account. I've also created xsl pages to edit the list. But when my user gets to these pages, they are automatically logged in as guest. How can I force the login window so that they can get more rights. I've searched the net and this forum and what I find is that I need to initiate a script to switch user account but this scriptstep is not compatible with the web. How can I setup a security concept that allows me to do this.

I want that users see only the objects they have created in a given table. For that I've set custom priviledges for the records in the users' priviledge set such that there is a limited access for viewing, editing and deleting according to the calculation: CreatedBy = Get ( AccountName ) where CreatedBy is a global field populated at startup with the function Get(AccountName). This means that the current user sees only the entries he has created in that table. However, when viewing a list view report on that table the current user sees all the fields he didn't create. These fields have the value: Keeping that priviledge set route, is there a way …

Hi all! I have a record with portal and if it will be locked the edit,modify and delete will disabled to every fields by user privileges. And if record locked the portal rows still can be created and deleted. So the record not fully protected. I can't set portal rows creation and deletion to limited because available possibilities just 'yes' and 'no'. If record is locked existing portal rows edit is disabled too (it's good).The question: How can I disable portal rows creation and deletion if any field is fully protected? (just in locked records, new records must have full acces) Thank you in advance. [color:purple]If you a portal professionals pleas…

Hi, I'm totally a newbie in Access & Privileges. Is there a function that checks if the user can create a record of a given table? Something like Get (RecordCreationAccess) Thanks

We are looking at a couple of plugins for encrypting a client's data. The Blowfish plugin from Sky Dancer looks promising. I'm wondering where folks choose to store the encryption key. We can't have the operators having to type in a key each time they need access to the data. I'm sure there are resources that I should look at for best practices. Any advice or direction for what should be read for this would be much appreciated. Thanks.

Hi Everyone, Not to beat this topic to death, but I keep hitting the wall on this one. I understand using the auto-entered Get(AccountName) with the Extended Privileges to allow the record creator to view, edit and delete their own records. Here is where I am am stuck. Let's say Allison, Ann and Alexander are in Group A, and Bob, Brandon and Bailey are in Group B. Is it possible for Allison to create a record that can also be viewed or edited by the two other members of her group (Ann and Alexander), while restricting access to all members of Group B? In other words, I wanted each user to be able to create, edit and view their own records, but also flag t…

I've got an order entry system in Filemaker 8.5. Each order has a status. After the status is changed to "billed", I'd like to be able to lock the record so it is viewable only and cannot be edited. I do have 2 privilege sets created -- Staff and Admin. I'd like the Admin to be able to still edit the record if necessary, but it to be totally locked by the Staff. Is there a way to lock the record based on the status of the order?

Been with Filemaker since 3.0, created a lot of solutions. Maybe I'm overthinking this one. IN A NUTSHELL... Database consept: Time Log Target users: 25 Target Platform IWP (web-app) Concept: Users enter time spent on specific projects and managers can run reports on time usage. This part I got (pretty easy) The part I'm having trouble with is the VP does not want users to view other peoples time entries. Only ther own. Is there a utility that will only allow viewing records specific to account names? The solution is probably simple, but my mind is getting all cramped up. Thanks, Bob

Hello all, We have built a solution using the separation model. It just comes up to my mind that users could be possible to create a new filemaker interface file themselves to access the data by defining a proper setup on using the external data source. This could link to a security concern. I am not sure if there is some smart setup which i have missed out or it is a design limitation which could not be avoided. Is there anyway to tighten this or can we disable users to create new layout on external data source if they do have a proper account to access the data file? I appreciate any input here. Thanks,

I'm starting to explore using a USB hardware lock for our products, does anyone have recommendations with regards to use with Filemaker in cross platform applications?

Hi Guys, I'm wondering if someone can help us out. What i would like to do is restrict people so that they can only see the records in the database where their username matches an "account manager" value. I've been looking in to access and privilages but cannot see how's best to do this. Thanks, Ian

Not sure if this is the correct area to post but my question is regarding security. Some of our databases are getting very big because of files and images stored in containers. We are thinking about setting up a process for storing files on our file server and reference them in Filemaker. We know how to do this but I can't seem to overcome a security issue. When accessing referenced files from a file server the user obviously has to have credentials to access the file server. We may have files from databases they do not have access to on the file server. How do we allow people to access referenced files without giving them access to other files that may be store…

Hi everyone, Beezwax just announced a new training on the topic of security: Fundamentals of FileMaker Security Who should attend FileMaker developers Date Friday, February 5, 2010 10:00am to Noon PST Location Online via WebEx Instructor Jerry Robin Cost $75.00 To register, call 1-510-291-4982 E-mail [email protected] Workshop description Security is a major concern for both developers and end-users of databases. It governs whether a user can open a given database and determines what functions and data are accessible to users once they do open it. Given the sensitivity of data in most FileMaker systems, fluen…

I'm creating several forms that multiple windows users will be using and are required to digitally sign when a record is completed. What I'm looking to do for a digital signature is to capture their windows login and place it in a field when a button is pressed. Sounds simple, but I can't figure out how to get the windows login. Please help!

Hi Happy New Year to all I have just created my first ever FMPro 10 database pretty basic but it suits my needs for now, i love the fact that pdfs can be inserted via container boxes ...but therein lies my problem.. i need to have a guest view that will allow viewing (opening) of the pdfs but not allow editing of the other information on the record.. The guest read only access would be ideal but it doesnt seem to allow them to open and view the contained PDF files..im assuming that its something to do with priviledges but reading tutorials is just going over my head @ the moment..surely there is a straight forward simple way that im just not picking up on? Any…

We've had an issue with our invoices. At the moment, when we do an invoice, technically if we wanted we could edit it at a later date. Is there any way of locking fields AFTER they've been created? It wouldn't be every field, only the line items (which are done via a portal from another database, and who the invoice is to. I'm not sure how to do this? Cheers ps If this is in the wroing section, can a mod please move it

One user has the default 'Data Entry Only' privilege set which works fine. On one particular table she needs to delete records. No problem - I set up a script that first checks it's her, then deletes the record. It's running the 'Run script with full access privileges' checked. The funny thing is, most of the records she can delete. Some return an error of 200 (Record Access is Denied) after attempting to delete the record. These are running the same script as described above, in the same table. A dialog box at the end of the script reveals that she is running the script as a privilege set of [Full Access], as it should. Am I missing some kind of imp…

It's been many years since i used this forum but it proved very fruitful last time so I'm hoping someone can help me again! I use filemaker 6 on a mac os x leopard. In the last few days its been crashing when i open certain files, i've recovered those files in question. They open when i select 'no' to agreeing to sync dates and times, otherwise the program crashes. It's so unstable at the moment. I have everything backed up and i have also reinstalled FM6 but it still keeps happening. I also have filemaker pro 8 and have installed it hoping to convert my database to 8. It wants my password...i have no idea what i set as my password. I've tried Admin and no passw…

Currently I have 12 databases (created with previous versions of filemaker so most are related but the databases are individual of each other.) All databases have about 15 users. Each user has their own different password. If I want to change a password for a user I go to each database and make the change. Is there a way to streamline this so I can change a password for a single user in all 12 databases with fewer steps?

Good Day, I have a database of hazardous materials. Some of the fields include: owner, chemical name, quantity etc. I have also activated IWP for people to go in and change their own inventory (ingenious, I know). A log in script filters for their 'stock' only and then can add and delete or edit. Now: IWP Accounts (online privilege set based - restricted access) are created automatically through the 'owner' field. The PWs are created based on the owner field plus a numeric string. So far, everything's going great .. I'm wondering now how I can automatically delete such a user account, when his/her 'stock' goes to zero (aka. when no more records with …

I read the post Locking Records Against Changes (Topic#210439) and I think it's great, thanks for offering that it was exactly what I was looking for. And now... I'd like to ask how to take it just a step further. I would like to be able to lockout entry through portals on the locked out record. Here's an example (fictious). I have an event database. Attendees can be added through a portal. At some point in time I will lock the event record preventing further changes. It was also be necessary to prevent further attendees from being added as well. Yet for events not locked, attendees should still be able to be added. I fiddled with the same lock fie…

Hello This is my first post as I'm really stuck this time - although I've found loads of useful advice here in the last year! I've got a relatively complex DB but am self-taught so I'm sure it doesn't follow 'normal' design procedure! Basically, I want to restrict access to certain found sets of data based on users privilege set - which I know how to test and have a startup script that gets this data into variables. My problem is if I do 'find' script steps - it gives the correct data, but still leaves the user the option to 'show all' which I don;t want. If i restrict the interface, it also takes away too much other functionality. They access throug…

i have two systems one at receptionist other at me and one single database one read only and other full access privileges i want both the persons use database at same time how to use wat settings do i need to do pls help me

I am new at this but I wanted to make an application and let the user be able to download it from the internet. How to I go about protecting the app with serial numbers. Is there a service they can register to? Can someone just get me started on this. I have no experience with this. Thank you

as we know we have a login script to enter but is there any script so that we can enter username and password that we made it personally inside filemaker which cant be cracked by other 3rd party softwares . hope u understood login script with username and password we defined other than filemaker default accounts

Hi everybody i made a database with restless days and nights finally with this wonderful product it was possible in little time. I am using advanced fm pro. I want to keep it for sale, but i found out that with some 3rd party applications fm pro database accounts are visible by which any user can access that database with related assigned privileges being intact, but though we remove admin account theres still presence of a either guest account or buyer account or both being vulnerable that still its possible that to visualize buyer account by which theres is high risk of retouching the buyers own database which is head down feature for the creator of the d…

Okay, well I've just found this super helpful forum on the web so I'm hoping i can take advantage of it! I work for an NGO in social services and am looking to develop a clients case notes database. I currently have three tables. one for casenotes, one for general info, and one for account keeping info. I'd like to secure information in the case notes table based upon the Id of the person who lodged the case note. How could I do this? I have currently created just 2 user accounts to play around with and want to set it so if user 1 has been assigned client X, the only user 1 can read and edit there case notes. other users should have access to other tab…

I am having this weird issue that i have not been able to solve. When I log in to my database I am asked for my name and password as usual. Then once I log in a 2nd box asking me for a log in and password pops up again but this time my username and password do not work. But then once i hit cancel the database will open. This is a very frustrating issue does anyone know what it could be?

I was certain this would not happen to me but.... I have a database that I have not had to access for some time and now need to. I cannot for the life of me remember the Administrator Password. Is there a way to retrieve the password?

Hi, I'm a new FM user. We are using a service to host our FM database (I don't know which version of FM server they are using.) From my office PC I can successfully open the remote connection to the server and database, but I can't from home. Any suggestions? I'm running FM 9 Trial on a Mac OS X Leopard. I don't know if I need to change firewall settings (and if so, how?) or reconfigure my modem or contact my ISP. Thanks for suggestions!

I've got a handful of users in an office setting that will use whatever Mac workstation is handy. There is only one account per machine. Users don't have individual accounts. Some of the users are entering username/password combos and having the keychain save that when opening the FM files. Since different users have different permissions, I need a way of bypassing the keychain from within Filemaker. I've come up with the following set up and would like some feedback. I've set up a new account with very limited privileges (access to only one layout, two fields) and implemented this start up script: Any thoughts or comments would be appreciated. …

Hi Guys, Just wondered if anyone has a improved example (using cript triggers?) of audit logging with the features of FileMaker Pro 10. So far I've looked at Excelisys and Nightwing's examples, both very good but all edits are stored in one field within the record. I was hoping to log changes in a seperate Table called Audit for instance and generate a record in that table with the old value and the current value, date, time and username of the edit. Thanks

I have been developing my application on the MAC and just started to port it over for testing on the PC (my computer is XP.) Well, besides the ugly screen transitions and other "cosmetic" issues with the PC, I have run into 2 major problems.. 1. The PC will not let me open the files using my admin username and password. It says the username & password are not valid!! I am able to open with the default user account only, but then have no admin access. 2. I created a runtime on the PC, but it doesn't open. The files do not appear to be correct (the icons are not the same as they are on the MAC) Anybody run into these problems and what I need to …

Hello all, I am hoping to get some insight on a weird issue that we are seeing. We recently set up about 15 users in one of our databases. We set them up with a default password, but then require them to change their password on first login. These users all have the same privilege set. Some users are not allowed to change their password. They get the dialog to enter a new password, and when they do and click OK, they just get the change password dialog again. These users are external to our network, and the network they are on is pretty locked down via firewalls, and security, etc. Is there something in the way FileMaker communicates during the change password…

Probably a silly question .. but here goes .. I just purchased Norton 360 and was setting up automatic back up ... and when I tried to locate the Filemaker db files they were nowhere to be found .. I could see the FM program and related files .. but not my database files ...when I opened windows explorer and click the filemaker folder where the files are .. they do not show there either ... when I boot up filemaker they obviously show in the filemaker folder, so I can open them .. why don't they show in explorer in the filemaker folder ... I want Norton to back these up for me ... but they do not appear in the list of files anywhere ... could I have somehow marked these …

Hi. Can a Privilege Set be assigned to many passwords such that each password will allow the user to deal with only subset of the records. Example: If I create a Markbook for Math teachers to include all the students of the school. How can I assign passwords to this Privilege Set such that each password will only be able to edit and change ... a certain class of the whole school.

Is the following possible?> I have an application with a number of screens. One of those screens is financial data and I only want certain people in it. Originally I set up a password that the financial person used to get into the application different than a regular user. Problem is if the regular user has signed in and the financial person comes to that workstation and wants to go into the financial screen they have to first log out and then back in to the application with the proper password. Is there a way to let them somehow enter a password while in the applicaition that will allow them to get into that financial screen? Does this make sense? Mike

I have a need to encrypt some data that will be exported to a file then imported to another database and decrypted. I wrote a set of custom functions that seem to work well but would love someone to try to break it. I know i could probably do it with less functions but I dont mind using 4 for readability. for my solution having the key hard coded into the functions works fine because it wont be exported with the data. here is some sample input. now is the time for all good men to come to the aid of the party THE QUICK BROWN FOX JUMPED OVER THE LAZY DOG. ~!@#$%^&*()_+{}|][":';?>,/*-+1234567890 sample> ´Øã¶ÔÙÚµã»ÜÈÙµÛƹÍÌá¿Ö¿ÔÑçµÏÔºÆÙá…

I have a number of related FM files, stored on FM Server, that are used for production in a multi-user setting. The primary user wants the following: 1. To be able to have a copy of the files for offline use with all data up to the point of copying it. (I am currently implementing this by running a backup job on FMS and placing the files in a folder on a server he has access to.) 2. Account security with different privilege sets. When opening the files via FMS, to use an account with full privileges requires logging in. (We use authentication via AD, so it's actually transparent.) When using the files offline, a full privilege account logs in automat…

I want a remote web user to be able to input data (a value list field) into one field only. I have tried everything I could think of in Accounts and Privileges but when they access the database they cannot change the field. ANY IDEAS?:?? I'm self taught in FileMaker and sometime you need to know the answer in order to do a search that will result in logical results. Thanks for any recommendations.

Is it possible to list all active accounts in FileMaker via a script?

Using FP 8.5 on a PC. I have mistakenly changed the File Options to Logging in Using Guest Account and Switch to Layout, Data Entry. So when I access that file, it comes up in guest mode with out asking for a log in user. The file is password protected so I only have access to part of it. I can't change the File Options as Guest doesn't have that priviledge. How do I get out of this? I have not been able to find a way to switch users. Dave

I am creating a layout for IWP that allows the users to be able to only create new records. The user wont be able to edit any current records only the records he/she has created. Ive gotten that to work so far except that i have a few fields that depend on a value list. None of these value lists are showing up I checked all the settings and i can't seem to find why this is not working. Thoughts?

I'm creating a layout to be used with IWP. I'm using a privilege set that locks down all the layouts and records except for what is absolutely necessary for the user. But I've run into a problem. I want to log the user into my sessions table, but not give them any other access to it. I've used privileges to lock them out and written the script to log them in. I've set the script to "Run with full access privileges", but that is not happening. Testing shows that the script returns tons of permissions errors. Am I misunderstanding the "Run with full" option or what?

hello all I'm looking for someone to help me in making one password for many files when you select to change the password it will be change in all files of the database i am using filemaker 5

This morning I opened a file that I am developing. As usual, it asked for my password, and then opened normally. I made a few changes but was then called away for about an hour. When I returned I re-opened the file and it did not ask for a password, but went straight to the startup screen. I tried to reset the password, no help; I deleted myself and then established a new user (same as the one I deleted), again no help. I also noted that when I closed this file I got an "Unexpected Quit" message. I next got out my installation disk, and re-installed the application. This solved the unexpected quit problem, but I still can't get my file to ask me for a password. …

At the Devcon several people approached me concerned about information presented in a session relating to passwords. There are a couple of different versions of the story they all told, but the gist of it is as follows. Apparently some people were storing FileMaker Pro account names and passwords in text fields as part of some sort of ersatz log-on system. The speaker apparently cautioned them against this practice; but the speaker apparently also told that if they chose to follow this practice that they could “protect” the information in the fields by turning off the index for that field. The first piece of information is good: avoid the practice. The sec…

I've created a user Privilege Set where, under the Data Access And Design section, the settings are; Records: Create and edit in all tables Layouts: All view only Value Lists: All view only Scripts: All executable only with no Custom Privileges set. Other Privileges are set to; Allow printing Allow exporting Disconnect user from server.. The issue I have is that when logged in with Full Access my PC keyboard [Windows XP] operates as normal, however after logging in using this Privilege Set when using my keyboard to select and copy and paste text I am getting "special" characters instead. I can confirm that the text string is copied to t…

Hi -- I need to store additional information about a User. For example, their department, etc. What is the best way to perform this in the world of Filemaker. (Application running on FM Server). Regards, Rich

I have a fp7 file installed on workstations which allows the user to open the application on the server (FM Server 8). I have to move FM Server to a new machine with a different IP but I can't open that file ("launcher"). It looks like it is locked. The Script function is greyed out as well as the Define Database. Any clue?

Hello All, We have 13 clients and 1 server. The database is set up to authenticate against security groups in AD. Everything has been working fine until today when one of the clients is now logging in automatically. Every other client is still prompted with a user/pass when clicking on the server. Nothing has changed recently unless it was accidental by the user. I am assuming that this is something simple or I am missing something obvious but I cannot figure this out. I have tried clearing all cache and temp files, rebooting, reinstalling FMP9, all with no luck. Let me know if I can provide you with any more information. Any help is greatly appre…

Hi, I have a privilege set called Standard User, In this users are limited to what records they can view with if ( UserField = get ( accountName )) My problem is that in form view, when a user clicks the background the fields fill with I am guessing that is because in my if statement there is no longer a record to access UserField and so it returns False. I have had a good look and cant see a workaround.. if anyone has got a solution, or a better way of separating different users data, i would really appreciate it. ) Thanks, Moaa

I'm having trouble keeping some users from accidentally entering new record information on top of previously entered records (Not hitting the "New Record" button before typing away and erasing the record they're currently on). I adjusted privileges so they can create new records, but not edit. This solved the problem except for the fact that I still need them to have access to a notes field on the table (Regardless of who entered the record initially or when it was entered). I'd also like to have a way for them to knowingly edit a record, say by hitting a button that says "I want to edit this record". I just need them to be aware they are editing. Any help is ve…

Good Day, We are running Filemaker Server 10 and FM Pro 10 for the clients. Is there a way to disable the windows toolbar along the top (the one that lists the currently open databases). Or at the very least disable switching between the listed databases under the windows tab. Some users are using this list to switch between databases instead of the buttons provided on the actual layout. Tks in advance Shaun

I was just wondering if someone goes though, history-find all-delete all records is there any way to see who did it and if so what will it show in the log. the user name, ip address ect. What? thanks

Info: [email protected] http://www.twitter.com/filemakersecure FileMaker Developers Told That Good Security Practices Are Even More Important In Challenging Economic Times August 13th 2009 San Francisco, CA. “Especially in these challenging economic times, FileMaker Pro developers and users must be assured of the reliability of their FileMaker based technology. A failure will have significant impact on an organization or users. Failure and lack of reliability will have adverse consequences for developers, for users, and for the FileMaker community as a whole.” That’s what noted FileMaker Server and security expert and FileMaker Pro …

Filemaker Pro 10 has a lot of facilities for printing out information about database structure, such as the relationships graph, field definitions, blank layouts showing field names, etc. Is there a way to print out information about accounts and privileges? I have a staff meeting this week where I'd like to explain to users which fields are accessible, editable, etc. by users in their privilege group.

Hi, instead of just a window dialogue pop-up, I would like to create a proper login page for my database? Is there anyway I could do this?

Hi, I've inherited an FMP db with a timesheeting component. Everyone can see and edit their own timesheets. Previously only users of a certain privilege set could see all of the timesheets. The boss wants everybody to be able to see each others' timesheets now, but read-only. The mechanism to 'prevent' access by a normal user was to set 'no access' to the value list of account names. So I've set it to 'read only' and now everyone can see everyone else timesheets. The problem is, each user can add and delete (through a portal on the layout) each others' timesheet entries (in a related table). I've looked through the privileges that are available and it appea…

When attaching to external ODBC sources via import or ESS, a routine procedure is to store authentication credentials in the database to avoid users having to enter them. However, in my company, security policies require changing the passwords on those credentials every 90 days. This creates a bit of a nuisance, especially when the accounts are spread across multiple FM databases. A colleague has asked if there is a way to store the credentials in an external database (for example, Active Directory) and then have FileMaker query that external source instead of storing the credentials inside the FM file. Are there any plug-ins or other methods for doing this that anyo…

August 3rd 2009 In several different venues over the past several days a number of different developers have inquired about processes for locking records in a table against further changes once a set of business rules are satisfied. Unfortunately in some instances the recommendations given in answer to these inquiries can fail and leave records vulnerable to hacking. These include the idea that layout access manipulation can somehow protect the record against being altered. In my view the best and most secure way to institute a record lock process is to use the Record Level Access privileges options found in the Edit Privilege Set options. For any g…

Hope someone has an answer for this. We recently created a privilege set that uses global variables in the calculation of a privilege set (example: if LocationID = $$YourLocation). We preload a set of global variables at login with user shortname, users location Id, etc., so we can use them to grant access to layouts and tables. This all seems to work fine in the privilege set to control Access and Privileges, until we go to try to find a record in find mode. As soon as we try to find a record (in a record set we can actually see based on privileges) it tells us it can not find any matching records. When we cancel the find request, we actually do have access …

This may be old news to some of you, but it took me a while to realize it. Global script variables may be fully accessible to the users for both reading and writing. Even in a locked down solution, a normal user with data entry privileges can read or modify the value of global script variables. The only thing required is access to the calculation engine and the Let() function. One easy way is to use Replace Field Contents with Replace with calculated result. Read the contents or assign to the global variable in the variable assignment of Let(). I was planning on using a global variable (e.g. $$isLicensed ) in a FileMaker runtime solutio…

Hi, There's a file that I use often and I switched it to open automatically as a 'Guest' (in File Options). Then I noticed I lost access to ScriptMaker and Define Fields. How do I switch this file back so that I have access to all these functions? Thank you very much, Hipsig

I'm in the process of building a scripted routine to port my client's data from their current solution into an update, where scripts, fields, TOs etc. have been revised. However it's possible, indeed probable, that the two files will have a different set of accounts and passwords. I don't want to inconvenience the users by having missing accounts or changed passwords. Is there a way around this problem? With appreciation.

PLEASE HELP! I would like to make a log in screen where people select there user name from a drop down list then type in their password to gain access ONLY to their HR record. example: If username(a field) and usernamepassword(another field) match, then go to layout "demographic info" but show no other records. The users should be able to change their password and have it emailed to them if they forget it. (emailing part is not that big of a deal) An administrator should be able to enable their account or disable it if needed. Also, I would like to set up permissions based on admins and general users. example, admins can see all users information, ch…

I'm sorry but searching these forums is frustrating because it is difficult to find what you want (at least to me). I made a simple database to record surgeries with standard name, date, procedure, etc. fields at work in FM8.5. My computer is pretty slow so I decided to bring it home and work on my MacPro. The problem is that is won't open saying "The account and password you entered cannot be used to access this file. Please try again." But it should be because I just made the database today and I can't even get the guest account to work. Is this a PC to Mac issue, or should I try to remove everything but the guest account? Thanks. Sorry if this has been …