Security Concepts

HI , I want to know that can we provide tab level security in FM means if we have tab control in any file then can we implement security on a particular tab.if its possible then plz help me how can we achieve this. Thanks, John

Is it possible to give a user that does not have Full Access a scripted routine for creating accounts? Rather than use FMP's native privilege routines, I've scripted my own which enables my client's administrator to quickly enable/disable accounts and to assign much more detailed access permissions than FMP's. I'm also using custom menus so that end users have access only to their own permitted commands. All users other than myself are assigned to my own "Default" privilege set. That set is virtually identical to "Full Access"; the only difference being layouts: "all view only". Through the scripted permissions system, only the administrator has access to …

On the face of it, a simple request, but I'm struggling to implement this. I need to allow users to add records to a table, but once the record is commited I need to restrict the update of specific fields. An admin user should be able to update these fields. Any suggestions welcome.

Hello - I have done a search in the forums and cannot find a topic with this specific issue so here goes... We have FM Server 8 Advanced and have frequent and annoying problems with users' web login accounts showing as "password expired". We're using FM authentication as we cannot use the Windows auth for these logins. Now, we're not entirely sure if the problem occurs randomly or after a period of account inactivity but it's becoming a problem and I can't figure out how to solve it. Is there some sort of inactivity expiration built in? Can it be modified or disabled entirely? Any ideas? Also, would upgrading to Server 10 help at all? I'd be ha…

Hi All, plz guide me that how can i create sessions in filemaker,so that user can see only his records after login. Thanks, John

This is my first database i have created with FileMaker and i have just completed adding a list of users (have been using the default account to create the database). I noticed that when you are prompted to login to the database, it seems that the Account Name is always defaulted to the name of the Administrator. Is there a way to change this setting so that when the login screen is displayed the Account Name is blank? Thanks

I have an old FMP 5 file that I want to use as a framework for a new FMP 7 file. I opened the old file and saved it as a clone; I then opened the clone and deleted all passwords. When I tried to open the old file in FMP 7 it asks for a password. I tried the old file's password, but it won't accept that. Why is it asking for this in the first place, and what do I do to get FMP 7 to let me into this file? Thanks

So, with an update to our database systems also comes an update to our security. Some of our databases have data that is accessible by everyone, while also having data that is only accessible to a few. The protected data is always on a seperate layout, and that layout is protected by the user privileges. That's fine. The problem is that, for each database, there is a "home screen" which links to different layouts for different activities, and if a user clicks a link to a layout that they don't have the privileges to view, they get the giant NO ACCESS message, but no way to get back (we would like to remove the status area for the users. Navigation should be…

Hi Is there any way in FM 9.0 to lock a table from deletion. We have a "Customer" table that is getting records deleted. We do not have any script to delete any records from this table but it is still getting deleted. I was wondering if there is any way I can lock this table so the records do not get deleted at all. This I assume will be at the FM Security level. Thanx

Is it possible to have a tabs on a layout have specific user privileges. So if I want to block certain tabs within a set from specific users is this possible?

Not sure where to put this so I will start here. Is anyone willing or able to discuss PCI_DSS issues? VeriSign quoted $35,000 for the certification process. Our application uses the VeriSign SDK and does not store the card number or CVV so the fee seems to be a bit excessive. Canadian gateways are requiring proof of compliance by Jan 1 2010. Has anyone heard that US gateways will follow suit? What are others doing in the spirit of PCI_DSS compliance? I hope we can have a frank discussion on these issues as they affect many of our FileMaker business solutions.

I have Windows Filemaker 8 Server hosting our DBMS within a local network. The DBMS is protected with standard filemaker password. I have no choice to share our local network with one company(no chance of separating it). The fact that the company can access our local networks worried me, since I got some sensitive Filemaker DB data. How easy it is to crack open our FilemakerDBMS? Any external software to prevent someone hacking into our filemaker or hide our DBMS from local network?

Not quite sure where to put this. I have one workstation that when entering an application gets the username/password screen. When she starts typing either the username or password the screen becomes unhighlighted (inactive) and she can't type in it. She clicks on the screen, it comes back, tries again, same thing happens. After a few tries it works. Any ideas? Mike

Hi I have just converted my single file solution to a Separation Model and the first interesting challenge is the accounts and passwords. I have 5 different access groups (privilege sets) and am happy with the handling of these. I have an accounts table and can control changes to privileges and passwords through that but I do not see a way to prevent the user from changing his password at the login screen. If he changes it in the Interface table then the backend will be out of step. I thought the tab in privileges might hide the change password button but it doesn't. I feel sure I am missing something here. Any ideas?

is there a an easy script to grey out a button for restricted priviliges? for example the staff has access to only certain layouts but there are buttons that take them to those layouts; true they will not have access because of their limited priviliges already setup in 'manage database' but can i have those buttons greyed out on the layout?

Hey, My records contain a field "Creation_AccountName" with the Account Name of the user who created the record. I am trying to add a calculation field to my table that shows a certain result, if the name held in Creation_AccountName belongs to a certain Privilege Set. Any suggestions? Thank you for your ideas, Mike :P

Hi. I created an import script in the default full access admin account but still get the message, "you have insufficient privileges to do this action. I have checked my admin privileges settings and it says full access. Not sure why this would be happening. I have other import scripts and this message does not pop up on them. Just on the new import script I made.

I am making an application that I will give to my university students. Since this filemaker file will be for students, there is an admin account and a student account. Here is my problem. When I quit by pressing the red x button on the top right of the window, this access message pops up. [color:red]"Your access privilege does not allow you to perform this action." After closing the access message, the application quits as it is suppose to. Not a serious problem but could be confusing to my students. Does anyone know how to turn this access notice off?

This is probably a simple one, but I am having trouble implementing it. I have a database that will have a number of clients accessing it on the web. These clients will login, and only access records belonging to them - in my case, the login name with be used is a client field and thats all they can access. If at any time they "Show All Records" they will see the records of other clients as well. Whats the best way to get around this. I was thinking of having a client-x.fp7 for each client so they only see what is in their file prefer to work in a single file only - instead of multiple. How can I prevent them seeing all records other than their own please? …

I have a fairly complicated issue. The current solution is relatively complex, with 19 tables, all related to a table I’ll call PARTICIPANTS. Here’s the issue: A peripheral department in the organization, one that serves some of those already in the database’s PARTICIPANTS table, is now asking to use the solution to track their participants as they transition through their own programs. A simple change might be to give this new player access to the server and allow them to log in just like the original clients. The problem is, they really shouldn’t have access to ALL the PARTICIPANTS records, only those PARTICIPANTS they serve. Also, the original clients fo…

Is there any way to secure a database, after a user is logged in, from access through external data source by another database? It has come to my attention that creating a new local database (L) while logged in to another server hosted database (S) will give the user access to all data, scripts and value lists as enabled by the user's privileges in S. In other words, the local database (L) is implicitly inheriting the open database's user privilege set. How can this type of sharing be locked down/stopped? Thanks.

Hi ! Is it possible to show/hide single fields according userID or privilege set in same layout ? If User1 is representing customer and User2 accounting, I would like to hide some fields from User1 (for example company profit), but accounting can see it. Of course I can make different layouts for both, but this was just a simplified example. In real life I would have to make several layouts for same purpose.

I'm building a password manager. I'm doing it for personal use, but once I work out the kinks, I'd like to include it as an option in applications I've build. If I do that, however, I'm concerned about security issues. I'd like to store sensitive data (website/data portal, username, password) and use well-constructed access prvileges, but I don't know how secure that is. I imagine storing usernames/passwords to things like, e-mail accounts, machine logins, modem logins, voice mail accounts, etc. I don't really intend it to be for really sensitive stuff, like bank accounts, but I must assume users will store that info too. And why not, if the data is …

My apologies if this is posted in the wrong topic area, but I have a kind of newbie question about accounts tables.... I know nothing about them, except that I think I need one for a solution I'm working on, and I don't know how to get past one crucial hurdle.... What I THINK they can be used for is to keep track of who is logged into a database at a specific time and to provide access control based on privilege sets... So, for example if person A has created record 1 in the database, and person B logs in, person b cannot delete record 1 because it is somehow marked as created by person A.... That's one example of how I'd like to use an Accounts table.... Is this re…

Hi. Sorry, I'm not sure where this topic should be placed. I have a problem with one of the privilege sets I've created. When I log in with an account with this privilege set, all the icons at the top are greyed out, Show All, Find, Perform Find, Cancel Find, etc. All of my scripted find buttons work, but I can't use command keys like Command-F or Command-J, and the icons are inactive. does anybody know where this is set? I tried setting the privileges so that all scripts were "executable only" This seems to be a problem in all tables, even ones where the user can see all records.

Hey Guys, The subject line says it all! I have a new client who would like me to do some work on their system, but they do not have the master password. Their IT guy, who quit..or was fired I don't know the story, never gave them the master passwords for the files he had created while working for them. I'm aware that FileMaker did an excellent job encrypting the files...Is there a way to get the old password or reset the existing password. P.S. They tell me the IT guy just disappeared and they are not able to contact him. Thanks for looking/replying Chris

Hi , I want to know how can i create login functionality in FM by using tables not by user access and privillege option and user can see the data that is related to him... can we do this in file maker. Thanks , Deepak

Here is a simple question that I can't find an answer to. How many accounts am I able to set up in a filemaker database.? I will not be using external authentication.. Is there a limit to the amount of accounts? I am using filemaker 10 advanced. Thanks Stu Jacobs

I'm looking to have user log in to their own specific layout. For instance I (dave) log in would be directed to "Sales dave" layout. When Mary logs in she will be directed to "Sales mary" layout. I've made a start up script for the file and in it have go to layout name by calculation. "User = Get(AccountName)" and then what I have a user table that has two fields 'user' & 'user layout'. I just can't get the calculation to work. Doing it this way i would eliminate someone from having to re-script every time there is a new hire.

I'm using FileMaker 10 revision 1. I'm tired but I think the Get(PrivilegeSetName) function (and probably some other Get functions) are evaluating differently in FM10 !? At least, when they are evaluated from the Accounts and Privileges(A&P) module. I understand the result for the Get(PrivilegeSetName) is implicit when I'm using this function to limit the access for a Privilege set, but this function is always returning the same result in FM10. I.e.: [Full Access]. The Data viewer is displaying the right result but conditions like If(Get(PrivilegeSetName)...), placed in the A&P module, aren't working anymore. While it was working in previous FM v…

I need a little clarification on how Filemaker handles users moving between databases. For our system, a Main Menu is used to allow users access to the various databases they need. Each user has his or her own login name and password for this main menu, and once there, they can click on links that run scripts to open other databases as needed. They have accounts on these databases as well, and it usually logs them in to those databases seamlessly behind the scenes. But not always. For our order entry, users enter the order, and when they are finished, the order is printed and copied to another database that does not allow changes, just for record keeping and …

I have a FM10 client hosted file, which has three users, Admin, User and Guest. Guest is disabled, and both Admin and User have passwords. User has a customized privilege level, while Admin has full rights. The problem is that even though in File Options I have unchecked "Log in using", and only have checked "Switch to layout" with the default layout, the file always logs in as Admin when I open it. I simply cannot get it to show the login window. Is there any magical thing I need to do? I have read the manuals, searched the forum, Google, and the sample databases work as expected (showing the login window). Cheers, Mike

Hi everyone, I have been working on a solution that is now distributed across several locations throughout the UK. However, one area in particular - Telesales - needs access to a very restricted interface only. They need to be able to open the customer database and work from there. Now, there are several problems to this. 1. The only file I have viewable to all users is the main menu, which opens up a menu only. This then links to different areas, though most of them are entirely irrelevant to this individual. Whilst I can disable the scripts from opening any additional pages, it is still an inconvenience to have a redundant menu on the page. 2. My next ide…

Hi, all! I have a Privilege Set with the option "Disconnect user from FileMaker Server when idle" unchecked (inactive), but users signed into that Privilege Set keep getting logged off. Any ideas what might be causing this? Thank, FM fans!

I'm trying to understand what this actually overides in terms of security. I have two tables of which 1 is accessible to a privilege set call Web with the abilty to run scripts create records and access certain layouts. In the first file, the privilege set is able to initiate one of the scripts that calls a sub-script with the option "Run with full access". In this scripts it calls another sub script that is located in the second file which is also run with "full access". The privilege set is restricted in the second file. Question: does the option "full access" overide all restrictions in regard to: layout access record creation field access Or are thes…

Hi all, I'm am familiar with Record Level Access and have it implemented in a few solutions previously (really cool stuff). I'm running into a roadblock though in my latest project. I have a database where multiple users will need access to multiple records (and not see others). For example, Mary has access to accounts 3,6,7. Danielle has access to accounts 2 & 5. Carol has access to records 1,4,8,9...etc, etc. This solution has a user table in it plus a portal (to a table called access) that connects the accounts to the user table. Displaying the hypothetical access via a portal was easy. I just for the life of me can't figure out how to the restric…

After reading Comments' suggestion on generating random 10 character passwords, I realised that might be a bit constricting, say if you wanted to generate a password with a user chosen length perhaps? Comments' original post for the script: http://www.fmforums.com/forum/showtopic.php?tid/194847/ What I have is two fields in the table and one button. fieldname: PasswordLength is linked to a valuelist that gives numbers 6 to 26 in sequence [6,7,8,9,etc] fieldname: SitePassword is where I want the script to output to. button: Generate would run the mainstay of the script. From what I presently have: Middle("1234567890abcdefghijklmnopqrstu…

Hello I'm implementing the change-over to externally authenticated accounts with a large number of files in a medium-sized organisation. We're using FMP 9.0v3 for the clients (mostly Mac OS X 10.4 but a couple of windows boxes) with the servers running FMS 8.0v4 on Mac OS X Server. That's all going great. EA is heaven on a stick. My testing with this setup indicates that the clients need to authenticate with their short user names for the EA to work. I don't have a problem with this, it makes perfect sense to me. The Get( AccountName ) function returns the short username, which is expected. However I tested a database with FMP 10.0v1 Advanced today, an…

Hi ! I have a strange problem with the Privilege sets. I would like to allow things according the Privilege set. But in script step If(Get(PrivilegeSetName)="Blaah") it doesn't work. In Data Viewer everything looks ok, but... Here's a sample file. When Privilege set is set "not full", there should be a text "Restricted account" in the indicator field. What am I missing ?? Oh yes... FM10 adv in use Privilegetest.zip

Hi Guys, I have a user in two fm active directory groups, which are inturn is applied privilege sets in FileMaker. Is there a way I can obtain all the groups they are in, I've used the GetPrivilegeSet function, but this only obtains the the first group they are in. Many Thanks Jalz

It seems that someone should have asked this one already. But after a couple hours searching I figure its time for me to ask. We have 200+ databases we need to web publish on FM Server 10. We would like to give each of the 9 sales rep/users a personal login, for usage tracking. Typing each name and password in each database will be very time consuming and subject to (my) human error. Pointing me toward the proper forum/post or any help in resolving this is greatly appreciated. Thanks in advance. BillP

I have a database which the client has decided that they want pictures in. This has quickly taken the database size from 25Mb to 670Mb, so I thought it would be a good idea during the database redevelopment to split out the pictures into a separate file. In the old days of FM3 and FM4, I did this with multiple files quite easily - but I seem to be missing something quite fundamental in FM10. The main database has a lot of individual users, each with their own password. The Pictures database and the Main database have a common credential set - username 'IPC' with a complex password. This common credential set has full access to both the databases and h…

I have made a new layout in a existing database that consist of around 30 layouts. Is it possible to only password protect the one new layout? When i go to account priveledges, I made a new priveledge set that is "Almost Full Access" where they can do everything else but look at this layout. But now if you are in a privledge set that does not allow you to see the new layout, you also can not modify the database at all. Does anyone know why this is happening?

I recently renewed the SSL certificate for our FM database server running FM Server Advanced 9 v. 3 on Mac OSX 10.4, and now all the FM web functions have stopped. The machine is hosting some IWP pages and some PHP pages as well. I set up the SSL certificate over a year ago through an intermediate, and it has been running fine for a year. I just renewed, and now the web publishing components do not work. From the internet, I can get to the index page via https hosted on Apache, without being stopped by a warning, so the SSL certificate to from the web server to the internet works. But the web publishing is now not working properly. When I run the PHP test from th…

Hi, thank you for your help. First of all, when I edit the privilege set, I set the available menu commands to minimum so the print menu is not available for the users. Usually I add a print button to the layout so users can print the layout if they want to. But i have a summary report which displays in preview mode, how do I add something similar to make the users able to print? I really want to have the control of if they can print or not because I don't want to them to print some layout. Thanks in advance for your help.

Help! I converted (finally) Pro5.5 to Pro7 yesterday. Everything works, except for the passwords. The passwords work in 5.5 perfectly, but when trying to use the same passwords in 7 for the same files, there is an error messsage "The account password that you used does not work. Please try again." Same exact password for the file, but it's a no go. I know that it's case sensitive, but it's still not working. Can someone please help? My boss is ready to kill me!

Hi I made custom menus for my database and disabled nearly every menu item for users. Unfortunately I somehow disabled all the menu items for my administrator account as well and I am now unable to access layout mode or any privilege editing. I have admin access but how do I renable the full menus?

I know that with FM we can use Get(AccountName)to know which user changed the record. Is there a way to keep track of all users that made changes to different fields in a record.

Hello Please bear with me, I'm not a Filemaker "Pro" (as it were). I'm a novice user, and I need help with something that I'm hoping is very simple. I created a serial number database a long time ago (FMP7) and I'm porting it to FMP10 to re-release it with a couple of new bells and whistles. It's a free app that I give away on versiontracker.com. Many users have asked for simple password security. Not encryption, just a simple "type password" on launch. Is there a super-easy way to: - ask the user to create a password on first launch - ask for that password each time the app launches - have a layout where they can edit the passw…

Many professionally designed FileMaker solutions created in earlier versions of the .fp7 format utilize the Status Area only in Preview Mode of Reports in order to allow users to navigate through pages and continue to printing to either paper or PDF. When these solutions are moved to FileMaker® Pro 10, the ability of users to customize the status area can lead to unexpected and undesired results and potentially to incorrect report results. A new mini White Paper offers one solution to that issue. That paper can be downloaded here. Download PDF Steven PreviewModeManagement.pdf

I am trying to allow a filemaker database to be accessed from outside our office. I have that working through opening the filemaker port. The problem is that our users can get to all of our hosted files. I would like if they are coming in from the outside and not the inside to only allow them to open a certain hosted file. Is this possible? Thanks Thom

Months ago I inquired about digital signature fields, members responded and gave me good tips. I do have some related issues to solve and hope you can help me. I designed a layout report that includes two text fields at the bottom. One field designated for the SUPERVISOR and the other field designated for the TRAINEE. The Supervisor and Trainee sign off when the report is completed. It was suggested earlier that I set the “Field Level Access” for each field in the ACCOUNTS & PRIVELIGES section to limit who has access to the SUPERVISOR field and the TRAINEE fields. That seemed to be a logical solution at the time but I realized another problem, any supervis…

I have been asked by my employer to add our employee evaluation forms as a layout in FileMaker. They want each supervisor (about 15 total) to be able to enter their employee's evaluation information into this layout rather than having separate MS Word files. The idea being that it is available for management to review at any time. I can handle the permissions for allowing certain people to see only designated records but I am having a hard time figuring out how to block myself from seeing them. I am not a supervisor, management, etc. and can not have access to other employee's records. I would really like to host this file on our server so that they can all access it…

I maintain a set of Filemaker solutions on a Department of Defense network, using FMP 7 server & client. I would like to move to the unlimited thin client web-based version of FMServer. The problem is that DoD users may only access using their CAC cards, which store their PKI certificates. Does anyone have a way to validate PKI certs for CAC Cards?

I need some help I have lost my admin password to my database. how can I reset it? I only had one admin account. I can get in to the user account but I can't manage the database from the user account.

hi all so here is the problem i have a layout that is unusable until a hidden field is given a value that works fine but i have a button attached to a script that displays a custom dialog asking for a password the issue is that no matter what i type i type into the input field even the correct password it denies but still logs in i am using the exact function to match what they type to a field on another layout that holds the correct password Here is the part of the script i cant get: Show custom dialog ["Login"; "please enter the password"; register:password] if [exact (register::password ; login::password)=0] show custom dialog ["you have entered an incor…

OK, whats the trick! We've been using FM6 (ok no laughing) and I just converted some of our files to FM10 trial version to test. However, I can't access the files with my password the way I used to i.e. hold down the shift key and double click the file and enter pw. What's the trick to opening them with a pw now?? Thanks in advance, Sheryl

Is there a place within FMP9 where the default account name when logging in is set? Or is that pulled from the Mac OS X account name set in System Preferences/Accounts User Name? On this particular situation FMP always proposes the account name of "Mark" which is entirely unknown. How can this be changed? Assistance appreciated.

I have a database that was made for just one user, but know I'm looking into making it for 5-8 users that can't records form each other. I have learned to make accounts and privilege set that use limited view for table records by calculation of "Account = Get (AccountName)" where Account is the name of the owner of the record. But if user1 logs in he sees a lot of records where is in every field. How is the best way to hide these records? I have layouts that use table views and form views and they are accessed by buttons, so I think I could make a script that loops through every record and omit records that the users doesn't own. Is there another way?…

Hi, I have a database that will have 3 levels of user. The first would be User, this role would be able to create a new record, but not be able to delete a record, only be able to chance certain fields, as well be able to view the reports that will be created and be able to search. I would also like this User account to, when the db is opened, to display in full screen (I have used Kiosk mode, but the Browse window still appears). The second account is an Admin account that can do all of the above but not change/create/delete any layout or script. The third is a "super" Admin account that can do everything. The scenario too help explain further is in …

I have an issue that may be caused by improper Privileges settings, or by an improper Custom Menu settings. Therefore I've attached a screenshot showing how each is set up. I'm using FMP9. The intention is to provide the user with keyboard shortcuts for some of the on screen buttons. Therefore I've created a "Go To" menu (and an Actions menu) that consists solely of script calls. With current settings both menus present but with greyed out items. In Privileges I've tried setting Scripts to "All Executable" and also "All Modifiable." Both don't work. On the Custom Menu side I'm assuming FMP will automatically remap the keyboard shortcuts calls to the Comman…

We have some sensetive data that our top management want them to be encrypted. However, our database is used only within a group of 20 people and within the company's network or via vpn. So I'm looking for a simple encryption and that doesn't take much toll on the performance. Any advice on what kind of encryption I should look into? Thanks Sal

The Recovery Function and the Consistency Check remain in the new FileMaker® Pro 10 much as they did in FileMaker® Pro 9, but with some highly useful and important modifications and additions. A totally new feature in FileMaker Pro 10’s Recovery options is the ability to bypass a start-up script or layout that might be causing a file to crash. A frequent cause of this unwanted behavior is a corrupted graphic on the splash screen or an opening script stuck in an infinite loop. Provided that a developer or administrator has a [Full Access] account for the file, he or she can invoke this option. This will bypass the start-up script and take the developer to a newly …

One of the more interesting new features in the just released FileMaker® Pro 10 allows users to customize the newly redesigned Status Area by dragging icons into the Status Area and also by deleting such icons. There may be circumstances however where such actions could have unexpected or unanticipated consequences for the business processes that the database is supposed to address and manage. Developers have some options to manage these activities and their concomitant results. 1. For any given Privilege Set, removing a privilege in the file, for example, printing, will disable the Print icon a user may drag into the Status Area. The icon will still be there,…

Hi, I am creating a database that will be maintained by someone else. I want to give them full access to the application, but I want to keep a user account that I can access in case they have any kind of problems. If I create a second user with full access privileges, they will have the privilege to delete my account. Is there a way to restrict them from deleting or modifying my account? Is there a possibility for a superuser that cannot be modified by the full access privilege?

I have an application that uses Filemaker V9 login for a class of users. Once authenticated by filemaker, I have a secondary login. The user name is one field and the password is the second field. I have no trouble getting the script to know when a user name and password are correct but I cannot figure out how to test if the user does not enter any data into the password field to trap this and create an error condidtion. Right now if the user enters in the name and then just presses enter while in the password field I get a success instead of an error. All help is greatly appreciated. The reason I use this instead of the normal filemaker password is tha…

Hi I thought I posted this earlier today, but I don't see it anywhere. Sometime in the past year and a half, I was using a file to test password protection. It never seemed to work right and I gave up. For the past year, i have had no problem accessing the file. Then suddenly today, it won't let me into the file. It is asking for user ID and password. I have tried all the likely suspects but cannot get into the file. I haven't done anything that should have caused this and the file won't open on either of my two MACs. I use Leopard, not Tiger, but for some reason the post is not showing that correctly. Help me if you can. I really need to get in…

This forum has helped me greatly. I am trying to find a simple solution to my problem and thanks in advance for all your help. I am working on a time sheet database where employees can input their time spent on different tasks. On one layout, I have a portal for them to input their time. I created part of the first two records for them to input LUNCH or BREAK. So the first record is for LUNCH only and they need to add time they spend on LUNCH and the second record is BREAK only. For the rest of the portal, they can adding different tasks from a drop down list, like WEB CHECKING, EDITING, and add time spent on that task. I want the first 2 records for LUNCH and B…

Hi everyone, I asked for some help a few days ago regarding the locking and unlocking of records. I have that working to a certain extent, though a problem has just been pointed out to me. When a record is locked, editing is limited - so you cant edit the record until it is unlocked. Deleting is also limited - this too cannot be performed until the record is unlocked. However, I have a portal linking to some related records, and I can still create related records even when the record is locked!! however, I cant change the privilige to be "no" for create, otherwise no one can create records even when it is unlocked... Is there anyway of limiting related reco…

Hi Everyone, A while back I was searching through this forum (I think!) and I found an article on record locking. I used it in the database Im working on to provide an option to lock a record from being available for editing. As such I now have the following scenario: Anyone can press a "lock" button that sets a field to "1". In the user privilidge sets, it says that for all users other than the admin account, if that field is set to "1", then editing is not allowed (deleting is restricted altogether). However, my problem arises with the need to unlock this record again in the future. I made another button called unlock, and made it set the field to "0" whi…

Hi... I'm really new to filemaker and am working with a trial. This is what I would like to do...we have 6 offices...each office needs to have the ability to add/change records that were created and associated with that office. They can only see/read records associated with other offices. I'm assuming each user needs to be a member of a group associated with that office and you set the permissions based on group membership. On the flip side...sometimes accounts get transferred to another office so I would need to change the permissions to that office. Thx

Hey, I’m about to set up a file where the creator of a record can decide individually which other users / user groups will be able to read his record. I thought for this I could set up a user table that holds information which users can access which records. The other way round would be to write into the record which users can open it. I thought I’d create a field that contains all the IDs of the users that are allowed to read it. I prefer this approach. A script or even better a filtered portal could restrict the access. May I ask if anybody has some experience with this kind of record access management? Is this a practicable way of approaching my in…

Because I've mostly designed databases for my own use, my general development skills have gotten well ahead of my security savvy. I'm currently building my first database in which I want to tightly control record creation, deletion, etc. according to privilege sets, custom menus, etc. Is there a white paper or other resource that covers a good range of basics and strategies for "locking down" a solution in terms of record creation, deletion, etc -- I don't need to read about privilege sets and accounts, I'm talking about how, for instance, to stop a privileged user from using the CMD-N keystroke command instead of a scripted button I'm creating to provide a new re…

I would like to know if FileMaker 8.0 Server has any audit capabilities or logging that would allow me to see who has viewed and/or modified a table? The users all log into FileMaker with their own usernames and passwords. If FM8 server doesn't do audit tracking does FM9 server have this feature?

Hi I have just finished my database and decided to add an account and password to the one that was already there. I also decided to change Admin to [Data Entry Only]. The problem now is when I start the DB up it automatically starts up as Admin. Is there away to re-login so that it gives me a option to type a username and password or have I messed it up. Regards Peter

Hi, I am trying to create an account for users that have the privilege to add/delete accounts but not edit privileges. If I give the user access to manage the accounts & privileges provided in FMP 9 Advanced, the user will also be able to edit privileges. If I create a layout/script to add/delete accounts without giving them access to the Accounts&Privileges, I am not able to list the users and privileges to add or delete. Is there a way to get a list of all users and all privileges into a value list?

To be compliant with Data Protection Law I must keep a log with every login details (user, time in and out,...) and failed login attempts. Is this function available for FM9?

I am a very beginner with FM and as a class project I need to work with a PlantDataBase a retired Teacher created. I was ask to basically just review the content. But I cannot open the File (and neither can our Office Assistant etc.). I did try ADMIN as Account Name... but it did not work. I do not know what a Cracker is and how to get it and of course my fellow students and teachers would not like the info being lost etc etc. Please help... what can I do. Thank you

I can't figure this out. Is it possible to make a password field. you know, when the user types in the password it shows up as "****" Any way to do this on a layout? Thanks.

How can a separate account be created to allow for data entry? When I go to edit privlege sets, the fields are grayed out. I'd like to create another privlege set to allow for data entry and to not show the toolbars. The toolbars allow scripts to be created. Is there a way to do this without kiosk mode? Is kiosk mode secure and does it allow for data entry? Is there a demo of kiosk mode? Thank you

OK - I'm a proper nob. I have set several checks in the startup scrip for my solution, including one that checks for the application version. If it is not 'runtime' then it exits the application to avoid anyone reverse engineering my solution. HOWEVER, I have messed up. I have deleted the safety step that allowed me to over-ride this. I have backed up my solution but not the 9 hours worth of work I did today. Is there anyway i can 'break into' my solutions to cancel the startup script or edit it without the start up script executing and booting me out. Please, Please, Please, Please, Please, Please, Please, Please, Please, Please, Please, Please, Plea…

I apologize if this has been asked before...but I'm in a time crunch. I'm trying to figure out exactly the consequences of administering security onto a database for the first time. This is my situation: I have a database where I only want people to be able to view and print data but not be able to add, delete, or change the data. I set up a user that can view only. I have a layout that users enter dates and then selects an account from a value list and then executes a report that gives the data from that account between the dates requested. Since I added the privileges I can no longer select the account from the drop down. I've tried to change the privilege to allow…

How would you create a database that displays only the records that match the users info. For example.... currently I have a script that says case(get(currentuser) = "User A"; A; get(currentuser) = "User B"; B; ect.... Then I have a portal that pulls all the matching records depending if it's user A, B ect... Well what if I wanted to make it so that an admin could manage by adding users and not have to go into the script. I have a few idea's, for example what if I made records for each user and when they log in it only display's their record, but it doesn't seem very secure. Any ideas are greatly appreciated. Lisa

When I use these functions: Get ( PrivilegeSetName ) Get ( ExtendedPrivileges ) I get the same value no matter which user is logged on. My accounts and priledges are shown in the attached. What might I be doing wrong? Thanks. extendedpriv.bmp priv_sets.bmp

Hi, I've just finished a program in Filemaker that I intend to try to sell commercially. I have the program completely finished, but now I've run into a couple of problems on how I'm going to distribute it. When I create the runtime and remove the admin privileges it now asks for a user name and password. For this particular program, data security is not an issue and I would like to disable the login at start up. Does anyone know if there is a way to disable the login prompt when it starts up? It wouldn't be so bad, but it has the wrong user name displayed and anyone using the program would have to retype the user name and password every time they use the pro…

Ive been working in a solution for a while now then i wanted to add a pass to access it in the next day my was not being access it anymore i am desperated! is there anyway to override it?

Is it possible to make a log on User Name Case Sensitive. John

Hi Guyz, I have built a 10day time trial demo. I want to know if anyone can unlock it. If you do, please re-post the file and share it with the community. I have not removed the Admin user and I am even happy to give out the admin password. Username: admin Password: jeffe I have tried to bypass this security but was unable so I want to know if there is a way or not. Good luck jeffe Time_Trial_Demo.zip

FileMaker 9 I haven't seen this answer anywhere, but think this is the right forum to ask. I have solutions that exist in two places - a dev server and a live server. Some of these solutions use the data separation model. I usually fix bugs and write new features in the dev server, then post to the live server during scheduled downtime. However, the user accounts are not in sync. The solutions contain a mix of externally-authenticated accounts and internally-created FileMaker accounts. Obviously, I'm not worried about the external accounts. Is there any way to transfer the FileMaker accounts from one solution to another, such as from live to dev? TIA …

I have a table with exactly 192 records and it's important this number does not change. Is there a way to lock the number of records in a table to prevent the user deleting or adding records?

Hey guys, i'm sorry if this question has come up before and also i apologize if it is a rediculously easy solution, i have spent many many hours trying to work it out and searching and reading for the solution but couldn't find it. I am setting up a staff hours record and everything is ready to go bar one thing. I want to setup a button in which the user clicks to open up thier hours for the week but must enter a username and password first (to stop other staff from editing pr viewing others hours). I tried using a password script but this doesn't seem to have anywhere where i can set the passwords and i can just hit cancel and the staff can still enter in the i…

just a simple one from a beginner but how can i lock and when neeeded unlock a record so others cannot change it thanks col

I am designing a DB for use where a Common Access Card (CAC) is used for computer access together with an individually created PIN. The CAC uses PKI, digital certificates, and digital signatures. Is there a function within FM-Pro that allows me to use digital certificates for user authorizations, or digital signatures to 'sign off' an action in a record? Any assistance would be appreciated, thank you. Michael

The clients are going to login through the LDAP name server. However, later I would like to use their login information, their login name, as data in a field. Is this possible to somehow pull this information into the filemaker database? I'm going to explain this a little more just in case. I have a library database in which people can reserve items. I want the people to be able to click on a reserve button and the name that they used to login to the reservation page (which is authenticated through an LDAP server) to post directly to the reservation. Is this possible? Thank you, Dustin Grella

Hello I have a situation where I need to limit the records an individual can see and edit. In the "custom record privileges" section of Manage Accounts and Privileges, for reasons too long to explain here, I need to set their edit access to 'yes' and only restrict the records they can view instead of restricting both their edit and view records ability. However, I don't want them to actually edit anything other than the records they can see. My question is if you do not have the ability to view a record, is there any real way of editing it regardless of what your 'edit' privileges allow? John

What's the latest, greatest approach to securing a 30 day trial of a solution for a prospect that has asked for one. The environment will be FMP9 on a single PC under Windows XP? Thanks.

When I add or change a password in the account mange section the password comes back as a much longer password. Example I make a new file and it comes as admin with no password. I enter 1234 as password close and reopen the account mange and the password shows it has 20 charactors. What is my computer doing nem

I’m working on an image management application. The images are stored in FM as a reference, and access to the images is handled by windows security. A user can only see the indexing info but not the image preview if he/she does not have read access to the folder containing the image. Each department has their own folder, and only members of that department have access to that folder. Clicking on the image will open it (using Troi file) using the default Windows application for the image / document type. Again, this won’t work if the user does not have windows access to the folder. The issue is users accessing the system using IWP. How does windows check the cre…

I have a very strange problem. Somehow I have users reporting that their password can't be used to access the filemaker database hosted on the server. Problem is only another admin and I have the rights to access the server and set or reset passwords for the database. But for the 2nd time in 3 weeks I have the user report that his password is unable to access the database and I need to go in to reset the password. Problem is neither of the admins have reset the password so we suspect that somehow something is reverting the password but we are unable to find out what. Anyone know of any ways to track it down?

On my database at work I have set up several different account privileges to allow/disallow access to different layouts. What my boss asked me to modify today was the number of users on a layout at any given time. He was concerned that data may get modified at the same time by 2 different people. I was wondering if there was a way to lock out other users from the layout when it is being modified. Any and all help would be greatly appreciated