Web and security

[jss44]

This may seem like a simple question (or solution), but I'm stuck... We have a database and files, hosted using FMP 6 Unlimited (using Web Companion to serve the files). We'd like to have web users search, add and edit records on-line. In addition, we want a few administrators to have access to the actual database to delete, run scripts, etc. (basically, admins gets full access via remote host; web users can add, edit, and search).

I'm not sure what the best way is to secure the database.... using the FM security databases, or access privileges. I don't want anyone to be able to access the database remotely, so I want it password protected. At the same time, anyone should be able to add/edit/search records via the web. I'm sure I'm missing something pretty obvious here...just can't locate it.

Suggestions?