User manual

Table Of Contents
Chapter 6 | Protecting databases 131
The Admin account is fully editable. You can rename it, assign it a password, or make the account
inactive. You can even delete the Admin account; however, you must assign the Full Access
privilege set to at least one other active account.
Important Don’t forget the account name and password that is assigned to the Full Access
privilege set. If necessary, write it down and store it in a secure place. If you lose or forget this
account name and password, you may not be able to access the file.
Guest account
The Guest account permits users to open a file without specifying any account information. The
Guest account is not assigned a password. By default, the Guest account is assigned the Read-
Only Access privilege set, but you can assign any privilege set you want to the Guest account.
Initially, the Guest account is inactive, which disables the guest option in the password dialog box
and prohibits users from opening files as a guest. You can enable the Guest account to permit
guest access.
The Guest account is not fully editable. You cannot delete the Guest account, change the Guest
account name, or assign it a password.
About the predefined privilege sets
Every new database file contains three predefined privilege sets.
1 Full Access: permits accessing and changing everything in the file
1 Data Entry Only: permits viewing and entering of data only
1 Read-Only Access: permits viewing but not changing data
You cannot change or delete these predefined privilege sets, except to enable or disable extended
privileges for them. You can either use them as is, or duplicate them and then modify the duplicate
copies.
The following table summarizes the properties of these privilege sets.
Privilege
Full Access
privilege set
Data Entry Only
privilege set
Read-Only
Access
privilege set
Records (in all tables) create, edit, delete create, edit, delete view only
Layouts all modifiable view only view only
Value lists all modifiable view only view only
Scripts all modifiable and
executable
all executable only all executable only
Extended Privileges all off, except
fmreauthenticate10
all off, except
fmreauthenticate10
all off, except
fmreauthenticate10
Allow printing on on on
Allow exporting on on on
Manage extended privileges on off off
Override data validation warnings on off off
Disconnect user from FileMaker Server
when idle
off on on
Allow password modification on on on