Filemaker 7 Security Model

[HampMac]

Hi all, this is my first post on this forum. I am working on a time-billing solution that is designed to have two levels of privileges, an Admin level and a User level. I would like to use Filemaker's built-in security scheme, but the solution needs to allow Admin to create User accounts. However, I don't want the Admin level to have [Full Access] privileges. It is my understanding that only [Full Access] accounts can create additional accounts. If there is a way around this rule, I would appreciate any info. Otherwise, I guess I'm going to have to generate my own password fields, password scripts, and accounts to make this happen.

Thanks,

HampMac

[The Shadow]

No, don't do that.

FM7 has script steps to allow accounts to be created and manipulated. Write your own scripts to create/delete/modify accounts, then set the script to be "Run as Admin".

Any privilege set given execute permission for the script will be able to create an account using it.

[HampMac]

Hi Shadow, thanks for your reply. That's the way that I have set up this project. I have different layouts for Admin accounts and User accounts. On the Admin layout I have buttons that allow for creation of "User" accounts only which is a lesser privilege set than the Admin privilege set. However, when I log in under an Admin account, and I press my Add Account button, I get the dialog that verifies the new account name and its password, but then I get another dialog that states "Your access privileges do not allow you to perform this action." I do not get this message when I log in under a [Full Access] account.

I have defined the Admin account to be able to perform all executable scripts.

HampMac

[HampMac]

Hi again. For those of you who are interested, I discovered what I was missing in FileMaker Advisor magazine. I didn't check the "Run script with Full-Access Privileges" checkbox in my Account management scripts. Once I checked this checkbox, my script works great when I log in under an Admin account. Thanks for your input Shadow.

HampMac