Restricting browsable records based on user and group membership

[Crazy Bob]

Hi guys,

hope someone here is able to offer some advice (and I posted this in the right forum).

Basically I have created a PO system that everyone at my company has thought 'ooo that's nice can we use it' it isn't anything special or earth shattering really.

However I am aware that in order for me to be able to roll this out to multiple users I need to be able to restrict the records being viewed based upon the user accessing the DB and the group they belong to.

So my question is this. Is there any way in FM 8.5 I can restrict the found records (and keep them restricted) that the currently logged in user can browse based upon their group or username. When a new PO is created I'm recording the user ID of the creator (their FM login) so I wouldn't have thought this to have been too difficult, however after some initial digging around I can't find any way to reference the current logged in user, let alone compare that against the users and groups defined within the DB (not as a separate table, but FM users and groups).

Hope that makes some semblance of sense and any help/advice would be greatly appreciated.

CB.

[Reed]

Get(AccountName) will tell you who the current user is. You can define which records users of a certain privilege set will have access to in a specific way using the calculation dialog. If you want specific users to have access to a record, then there will have to be a field, or related record that outlines who can access it. Then the calculation dialog in the accounts and privileges section will evaluate true or false for each specific record.

[Crazy Bob]

Thanks very much for the response Reed, I'll see what dama.... eeerr progress I can make with that info

CB

[Pescador]

I am have a similar situation. I am setting up a simple employee leave database using FM 8.5 Advanced. I wish I was advanced in using it but am not. I have a page that shows each user how many days they have used for each type of leave (Vacation, Emergency, Sick, etc.). There is also a page for them to submit electronically for days off. I am wanting to restrict access to each user so that they can only view their individual summary page and the request pages they have filled out. I do not fully understand how to do what you have posted here and wonder if you could post and example.

[yellowcake]

Hi there, im doing a similar thing... this seems to be working for me.

Set up a privilege set and then set the record to custom privileges.

under the various bits you can set the level with this calculation...

If ( Get ( AccountName ) ≠ ( First Name ) ; 0 ; 1 )

in my case im calling the AccountName. If the accountname is not equal to the fisrtname in the record, then they cant see it. - if it is equal they can.

with this the users can look at their own personal info, passwords ect but no-one elses.

may not be elegant but its working for me.

Cheers

[Pescador]

Thank you for the reply. If anyone else has suggestions I am interested in learning multiple ways of doing this. I will try out the way suggested. It looks simple enough.

[Pescador]

I need a little more help. I have done what was explained above and it works great for the main employee pages. I am trying to limit who can view the request for time off pages. I only want the person that submitted it to be able and view it. I used the same technique as above but it is blocking all pages. Any ideas as to what the problem could be? Thanks for your help.

[Pescador]

Of course since I made the post I just figured it out. Thanks for any potential help though.