Web security combined with FmPro Access

[Ingar]

Hello!

I'm trying to build a web page with access to a Filemaker database.

I use the Web security database with a Field restriction and Exact search

option. I have used All users and no password. The Web security record is provided with the admin password of the DB.

When I do a search on the Web site and the Exact search criteria is not

true then I want to have an error page as an result ( This works fine if I don't use the Exact search option). Instead I get a Connect to "host" box

in the browser asking for User name and Password. Then I have to use Cancel to return to the search page.

I think the trouble is that I use a combination of Web security and FmPro

Access. When the Exact search criteria is false then Filemaker tries to use

Fmpro Access rights and thereby the dialog box pops up.

Is there any way to omit this dialog box or if I could make this box default to Cancel and perform this without any action from the user I would be very happy. If the box also could be /invisble, so much better!

Hope someone have some thoughts about this. -)

Ingar

mailto:[email protected]

[Anatoli]

FM Unlimited or FM Client serving web must be open with password, with Export Records enabled. Check that.

[Ingar]

The FM Client is open with a password. This password has everything enabled.

If I don't use the Exact search option I can fill in this password on the Web page and the search completes with my results page. But with the Exact match option and one missing criteria it all stops with this dialog box. The user can't get further no matter what he types in this fields. The best way to quit this is to use the Cancel button, the page then returns to the search page.

Ingar

[Unable]

"I use the Web security database ..."

"The FM Client is open with a password." - which uses FileMaker Access Privileges.

Still another instance of the inability to mix metaphors.

I recently posted a Sample File in which you can find, "...the developer has the options of the Web Security databases protocol or FileMaker Access Privileges protocol, but not both."

The best things in life are free, like already existing answers to questions.

[Anatoli]

RE: "...the developer has the options of the Web Security databases protocol or FileMaker Access Privileges protocol, but not both."

But FM must be opened on computer with sufficient password level to work. That your remark is valid for Web Companion.

Maybe something was changed during the years, but Export was required password settings.

[Ingar]

Maybe I have expressed my self wrong (English is not my main language).

First off all I thought I could use both Access rights as there is an option filling in a DB password in the Web security. But even without this there still is a problem if I delete all the Groups and Passwords in the FM DB and use only the Web security DB. I have 2 fields in the WS Db with the Exact search option.

If one or both of them is missing (or wrong) when I try to perform a search then the Connect to "host" dialog box still pop up instead of my Error page. Since I don't have any user name or password in the DB, the only way to get out of this is to use the Cancel button.

I hope this make more sense to you.

Ingar

[Anatoli]

I guess there is something, which prevents the WebSecurity to evaluate correctly, the Exact Search.

FWIW -- I cannot use Exact Search, because of public nature of our databases. I've just tested that once years ago to see if it will improve security.

Since that if I need security I will forget Instant and Custom publishing and I'll go straight the Lasso way.

[Unable]

No, you did not express yourself incorrectly. It may be that you did not express yourself fully.

I'm having a psychic moment and - wait, the clouds are moving - it becomes clearer - AAAaaarrrrrrgh! You are using IWP. Gaaahhhhhhhh!

BTW, the sample file I posted can be run such that the group:password of FileMaker Access Privileges can be eliminated from the anchor, thus requiring the ugly pop-up window for the cogniscenti to login.

[Unable]

"But FM must be opened on computer with sufficient password level to work."

No password is required to open a db file, though one or several can be assigned in FileMaker Access Privileges.

"Maybe something was changed during the years, ..." Maybe.

Now I don't know about your copy, but when I enable Web Companion (5.0v.3) and click configure I deselect Enable Instant Web Publishing and I mark Remote Administration disabled. What I find interesting is that in the Security box of that window FileMaker Pro Access Privileges is marked selected and cannot be deselected. Further the Web Security Database cannot be selected.

It has never bothered me.

[Anatoli]

If WebSecurity is open in FM, you can select and deselect Security settings as you wish.

[Unable]

Mmmmm. maybe that's why

[Unable]

Thank you Anatoli. I was so inspired I that I have taken the demonstration to which I referred and redone it to demonstrate the approach which you have shown me with that little bit of information which you provided. Of course, the original still good for just Access Privileges.

But I wonder how much either can help IWP. And I'm not likely to explore that.

[Anatoli]

Any time

Best security is in Lasso, then in Exact Search in Web Security and Custom Publishing.

Absolutely best security is to switch off computer

[Ingar]

Hi!

I would like to inform yoy all that the first question in this thread was written when I was using FMPro 5.0 but after I upgraded to v6.0 the problem disappeared. In this version when I try to do a Exact search and one criteria fails I just get a box saying: Access Restictio ; You do not have access....

And was just the way I wanted it to do

Ingar