copy privilege set to another file

[rob]

I am trying to write a script which will copy the privileges from one file to another.  I set up the accounts and have them in one file now I need them in the other one.

 

Is there some place where it shows every single setting in a privilege set?  Or do I need to take screen shots of every option and sub-option?  It took me probably 20 hours to set up.  I do not look forward to repeating it.

 

Also I want script to do it because if a file must be replaced then its back up file would only have older accounts and passwords.  It would need to be updated anyway.  

 

Also, I read up and can find nothing which answers this.  If I could get a list somehow then I could use Add Account with parsed values, right?  And I know I can not get passwords so I would to somehow set it to ask for new password on first next login.  It seems it can be scripted if I can find out the list of account name and privilege set name.

 

Nudge appreciated.

[doughemi]

Is there some place where it shows every single setting in a privilege set?  Or do I need to take screen shots of every option and sub-option?  It took me probably 20 hours to set up.  I do not look forward to repeating it.

 

Since you have Advanced, you can run a Database Design Report (in the Tools menu) to list all privilege sets with their definitions.

[comment]

Is there some place where it shows every single setting in a privilege set? 

...

If I could get a list somehow then I could use Add Account with parsed values, right?

 

Your question seems to mix up privilege sets and accounts as if they were the same - they are not. You can add accounts programmatically via a script - provided you have the data from which the script can operate. There is no way you can create a new privilege set via a script and determine the set's attributes at script runtime (though you can hard-code the settings in the script itself).

[rob]

Ah I see it, yes I was mixing them up, Comment.  I have dual need.  The manager says, "We'll put Bill same as Nancy we think.  What all can Nancy do?"

 

So I must come up with a chart so when we do something I will know whether I can use existing privilege set or must create a new one.  And something the Manager can look at.

 

I thought it would make sense if the chart looked same as privileges so I was wondering how much I would create myself from parsing something with that info.  If it looked like privileges then it would be far easier for the developer and the business to keep track.

 

I will try parsing the DDR then, thank you Doug.  

 

Could you explain what you mean by "(though you can hard-code the settings in the script itself)." 

[Charity]

Wow.  When you come up with something please share it.  I have bosso who wants to program himself and wants all controls and I do not thing that wise.  So I need to give him controls he feels in control of but not give him true controls but not deceive him either.  He need semi controls to control what will not hurt them.

 

I feel your pain.  

 

As for hard-coding, I think it is intrinsically bad.  Or even not intrinsically, it is bad.  It is because the world never stays static so a solution should not either.  If you figure a parse for the DDR to produce a logic view of privileges, I would love to see it.  I also struggle with accounts and now that I chose separation, I am in deep BLEEP.  

[comment]

The manager says, "We'll put Bill same as Nancy we think.  What all can Nancy do?"

 

Ideally (or at least that's how FMI envisioned this) you would have predefined classes of employees, so that your boss would say "We'll promote Bill to a supervisor" and all you would have to do is edit Bill's account and switch his privilege set from [slavishMonkey] to [supervisor].

 

That would make Bill's privileges from now on the same as Nancy's (who became a supervisor a year ago). Managing each account's privileges individually could quickly turn into a nightmare.

 

 

Could you explain what you mean by "(though you can hard-code the settings in the script itself)."

 

In the Add Account[] script step, you have the option to either assign the new account to an existing privilege set or create a new privilege set at the same time. The new privilege set's settings must be defined in the script step itself and cannot be calculated at runtime.

[rob]

I had to look up slavish money.  You crack me up.  

 

In the Add Account[] script step, you have the option to either assign the new account to an existing privilege set or create a new privilege set at the same time. The new privilege set's settings must be defined in the script step itself and cannot be calculated at runtime.

 

Wow. I missed that.  In everything I have read, security and privileges is the most difficult.  Hey Charity don't follow me ... I am struggling through my first solution.  I just recently learned how to relate this stuff together.

[rob]

monkey.  I meant slavish monkey.  I am not surprised when I read that folks bypass this part and it is so important but it is SOOO CONFUSING and difficult.  I suppose that is why programmers get big money?   Well< I am not a programmer.  I actually prefer music - don't ask.

 

It reminds me of a Lifesaving course I once took where the result was NOT the object of the game but rather the innovation a lifeguard would go through in order to achieve the result which was not achievable.  Or similar to the Kobayaski alternative.

 

Accounts and privileges = Kobayaski

 

So far, I have 34 individual privilege sets defined.  Some are identical except for a single field.  It makes me very tired.  Billie can modify that record except on Tuesday if it is flagged as Paid.  Nancy can over-write Billie if the amount is less than $500 and auth is checked to '1'.  There is a list of 120 specific requirements.  Do I handle them with security?  Auto-enter? Trigger?  I am trying to be good and use security but I understand why so many people choose wrong here.

 

Am I the only one who finds this the most difficult part of FileMaker?  All of it is fun except this part.  This part is painful.  Without the expertise and humour and assistance here, I think I'd tell FM to pis_ off.  As is, I just moan sometimes.  And I keep coming back for more.  Simply amazing.  

 

I shall study further.  Again thank you very much, Comment.  You are the corner post for this forum.