Web Security Database

[lynnp08]

I thought I posted this question yesterday but it doesn't seem to show up!

I have a question about using FileMakers Web Security Database. I want to have two different types of logins for one database. I want All Users to be able to login and browse the database but not be able to change anything.

Then I want another set of users to be able to login with a login id and password such as Twinky/Twinky and those people will be able to browse, add, delete, etc.

I tried to do this in the Web Security Database for this particular database, but when I try to enter the database, it automatically takes me in as "All User" and lets me browse around, but there aren't any buttons to add, delete, etc. and there isn't any option anywhere to login as a different user.

Anyone know how to do this using the Web Security database. I read something on the web that said that I should be able to click on the field I want to change and then a window will pop up asking me for a login and password, but that's not the case. I just click a field and nothing happens.

[Steve T.]

Howdy, lynn! AFAIK, the Web Security Database (WSD) is for Custom Web Publishing (CWP) only. I think the Web Security PDF mentions that CWP can use either the WSD or Access Privileges (AP), but Instant Web Publishing (IWP) can only use AP.

To let general users access your data without logging in, you would need to make sure the NO PASSWORD user has browse capability for your desired fields. In CWP using the WSD, a login box pops up when someone tries to do something the NO PASSWORD user cannot normally do, e.g. write a record or edit a field. I'm not sure what happens with IWP, but I imagine it's something similar.

AP lets you define passwords and access levels for those passwords. I've always thought the interface is kinda weird, but you'll get the hang of it as you click and change dots and things. The AP settings apply both to local use of the db in FM as well as web access through IWP. Maybe make a copy of the db and practice a little until you get used to it.

--ST

[lynnp08]

Howdy! Thanks for the clarification. I guess I don't know the difference between Custom Web Publishing and Instant Web Publishing. But I am successfully using the Web Security Database for several other databases so does that mean that I am using Custom Web Publishing?

In any case, I do have the NO PASSWORD users set to be able to browse records, and that I think is the problem. It just automatically takes the user into that mode and there is no option anywhere to add or delete records or enter a password to be able to do such. I have given those special users a login and password in the Web Security Database, but it never asks them which user they are. Maybe I need to set their login as All Users just like the other people and then assign them a password? I'll give that a shot.

Lynn

[Steve T.]

Hi, L! With IWP, FM creates web pages for you on-the-fly based on the look of a layout or pre-selected theme (I think... I haven't used IWP much). With CWP, you design most the web pages yourself and then use code (like [FMP-field:firstname] [FMP-field:lastname]) to show your FM data on the web page.

You're right.. it used to bug me that FM did not have a way to show a login screen whenever you want one, so I cheated and created a tiny web form with only a button in it (LOGIN) that tried to edit a dummy/false record. Since editing that record was a 'restricted' action that a NO PASSWORD user could not do, a login screen would pop up. If the user logged in successfully, the dummy record was changed meaninglessly, and if they didn't log in, they were taken to a login error page where they could click and try again.

I developed that system for a project I never finished but it seemed to be working great. The project was canned for other reasons and done in PHP/MySQL instead, but the trick should work for you, too, if you decide to use it.

--ST