User manual

Table Of Contents
Chapter 6 | Protecting databases 130
Extended privileges
Extended privileges determine the data sharing options that are permitted by a privilege set, such
as whether a privilege set permits users to open a shared file or view a database in a web browser.
The following table lists the default extended privileges that are available. (FileMaker as well as
third-party developers may define additional extended privileges to manage access for other
software products designed to work with FileMaker
Pro or FileMaker Server.)
When a user attempts to open or access a protected file using one of the above methods, the user
will be prompted to provide account information. If the privilege set for the account does not permit
the type of extended privilege access the user is requesting, the user will get an error indicating
that they cannot access the file.
All extended privileges except fmreauthenticate10 are disabled by default, even in the Full Access
privilege set.
Enabling extended privileges only makes it allowable for certain privilege sets to access shared
data. To actually access the shared data, you must also set up sharing for the type of access that
you want. For more information on extended privileges, see
“Viewing extended privileges” on
page 138.
Keep the following points in mind:
1 If you are hosting a FileMaker Pro database, the database must include the fmapp extended
privilege. If you use the Upload Database assistant to upload a database to FileMaker Server and
if no sharing is enabled, the Database Server enables fmapp for the Full Access privilege set.
1 Keywords for extended privileges that begin with “fm” are reserved by FileMaker.
About the predefined accounts
Each database file contains two predefined accounts: Admin and Guest.
Admin account
The Admin account is assigned the Full Access privilege set, which permits access to everything
in a file. The Admin account is not assigned a password. In files for which privileges are not set
up, the file options are set up to automatically log in to the file using the Admin account.
Keyword Extended privilege Determines if a privilege permits
fmiwp Access via Instant Web
Publishing
Accessing a database file from a web browser via Instant
Web Publishing.
fmxdbc Access via ODBC/JDBC Accessing a database file from another application via
ODBC or JDBC.
fmapp Access via FileMaker Network
and Server Side Scripting
Opening a networked shared file (either a file hosted by
FileMaker Pro or FileMaker Server).
fmreauthenticate10 Require re-authentication after
the specified minutes in
sleep/background - Go only
Accessing a file in FileMaker Go without having to re-login
after file hibernation or after using a different app. The
default time is 10 minutes; maximum time is 10080 minutes
(one week) (FileMaker Go only).
fmxml Access via XML Web
Publishing - FMS only
Accessing a database file from a web browser or other
application via XML web publishing (FileMaker Server only).
fmphp Access via PHP Web
Publishing - FMS only
Accessing a database file from a web browser or other
application via PHP web publishing (FileMaker
Server only).