Hi all, this is my first post on this forum. I am working on a time-billing solution that is designed to have two levels of privileges, an Admin level and a User level. I would like to use Filemaker's built-in security scheme, but the solution needs to allow Admin to create User accounts. However, I don't want the Admin level to have [Full Access] privileges. It is my understanding that only [Full Access] accounts can create additional accounts. If there is a way around this rule, I would appreciate any info. Otherwise, I guess I'm going to have to generate my own password fields, password scripts, and accounts to make this happen.

Thanks,

HampMac

No, don't do that.

FM7 has script steps to allow accounts to be created and manipulated. Write your own scripts to create/delete/modify accounts, then set the script to be "Run as Admin".

Any privilege set given execute permission for the script will be able to create an account using it.

Hi Shadow, thanks for your reply. That's the way that I have set up this project. I have different layouts for Admin accounts and User accounts. On the Admin layout I have buttons that allow for creation of "User" accounts only which is a lesser privilege set than the Admin privilege set. However, when I log in under an Admin account, and I press my Add Account button, I get the dialog that verifies the new account name and its password, but then I get another dialog that states "Your access privileges do not allow you to perform this action." I do not get this message when I log in under a [Full Access] account.

I have defined the Admin account to be able to perform all executable scripts.

HampMac

Hi again. For those of you who are interested, I discovered what I was missing in FileMaker Advisor magazine. I didn't check the "Run script with Full-Access Privileges" checkbox in my Account management scripts. Once I checked this checkbox, my script works great when I log in under an Admin account. Thanks for your input Shadow.

HampMac