Password security leak....

[Collin]

We have a small problem at the school where I work. Somehow FileMaker is filling in the password you need to login to our client database. So anyone who starts up our FileMaker Pro they can access our database with FULL USER RIGHTS.

This is with all our user profiles, and we don't know where to search this.

We are using FileMaker Pro 3.0

[dspires]

Assuming it's the same as 4/5, look under edit, preferences, document, and remove the password in the "Try default password" block.

[Collin]

Going to try it.

[This message has been edited by Collin (edited October 25, 2000).]

[Collin]

It's unchecked...

So that's not the problem.

[LiveOak]

You didn't mention what platform you are on, but there are some accessories that can be installed that type in passwords for you. Maybe some addition has been made. -bd

[Collin]

Windows NT 4.0 with sp4.0

And so far I know there wasn't made an addition. I should know this because I'm the system manager...

And they can't add new programs with my permission.

[dspires]

If you are running multiple databases that launch at the same time, for instance using an 'open script', then you need to check the enter password on start setting for all of the databases.

[Collin]

I would love to do that..

But I have esearched for it and I can't find it. So where in the program is it?

[Vaughan]

Look under edit, preferences, document, and remove the password in the "Try default password" block.

We seem to be going around in circles here...

If the very first database that people open has a default password then that password will be used to open all the other databases that the first one calls. So you'll need to check *how* people are opening the databases, and systematically go through each one and look for something.

I'd go through and check that each of the databases has appropriate password security set up. Even if I knew that they did I'd check again just in case.

[Collin]

I have looked where you said but there isn't a password filled in....

And all users logon in the same manner.

(Via link on the desktop)

I think I'll ask the developer of our database how and why this is happening.

[Collin]

I have "played" around a bit in FileMaker Pro and found out that the password he fills in to access the database you can't change.

So what I mean is:

The filled in password is (example): password

You can't change it to lets say: passwordnew

It won't let you enter a new password...

(this is when FileMaker prompts you to enter the password for the protected database)

[This message has been edited by Collin (edited October 30, 2000).]

[LiveOak]

It sounds like you don't have the master password for the files you are using. You will need to get it from the developer or ask him to make the changes. I might be a good idea to just have the developer diagnose and fix the problem! -bd

[Collin]

We are thinking on doing that, but just looking for what the problem might be.

If I remember correctly level 7 is the highest clearence level you can have in a FileMaker Pro database?

[Vaughan]

It sounds like your developer has create a unique password system for the database solution, one which only he will know about.

It's highly likely that you won't be able to find out anything useful without the matsre password anyway.

Get the developer onto the job.

[Collin]

Grmbl..

They always seem to do things like that, make you depent on them.