Home > Designing and creating databases > Protecting databases > Creating and managing privilege sets > Editing extended privileges for a privilege set

Editing extended privileges for a privilege set

Privilege sets can limit extended privileges, which determine whether and how a shared file is accessible. For a file, you can set whether a privilege set is permitted to:

•	open a shared file with the File menu > Open Remote command

•	access a database file from a web browser via FileMaker WebDirect

•	access a database file as an ODBC or JDBC data source

•	access a database hosted on FileMaker Server

•	access a database file in FileMaker Go without having to re-login

•	access any other features controlled through additional extended privileges that may be defined

Note  Enabling extended privileges only makes it allowable for certain privilege sets to access shared data. To actually access the shared data, you must also set up sharing for the type of access that you want. See Sharing databases on a network, Sharing FileMaker Pro data via ODBC or JDBC, or Publishing databases on the web.

For more information about extended privileges, see About accounts, privilege sets, and extended privileges.

To edit extended privileges for a privilege set:

1.	Start editing a new or existing privilege set.

Display the Edit Privilege Set dialog box. See Creating new privilege sets or Editing existing privilege sets.

Note  If the File menu > Manage > Security menu is dimmed, your privileges do not permit you to access it. See the note below for another possible way to edit extended privileges.

2.	In the Extended Privileges list, select the extended privileges you want to enable, and clear the ones you want to disable.

The following table lists the default extended privileges that are available.

 

Keyword	Extended privilege	Determines if a privilege permits
fmwebdirect	Access via FileMaker WebDirect	Accessing a database file from a web browser via FileMaker WebDirect.
fmxdbc	Access via ODBC/JDBC	Accessing a database file as an ODBC or JDBC data source.
fmapp	Access via FileMaker Network, server-side scripting, or FileMaker Go	Opening a shared file (either a file shared by FileMaker Pro or hosted and shared by FileMaker Server).
fmreauthenticate10	Require re-authentication after the specified minutes in sleep/background - Go only	Accessing a file in FileMaker Go without having to re-login after file hibernation or after using a different app. The default time is 10 minutes; maximum time is 10080 minutes (one week) - FileMaker Go only.
fmxml	Access via XML Web Publishing - FMS only	Accessing a database file from a web browser or other application via XML web publishing -FileMaker Server only.
fmphp	Access via PHP Web Publishing - FMS only	Accessing a database file from a web browser or other application via PHP web publishing - FileMaker Server only.

Note  FileMaker Pro no longer supports the fmiwp extended privilege. Opening database files created in FileMaker Pro 12 or earlier that use the fmiwp extended privilege does not remove the extended privilege from the privilege sets it is assigned to.

FileMaker as well as third-party developers may provide additional extended privileges as part of additional software products designed to work with FileMaker Pro.

3.	In the Edit Privilege Set dialog box, define any other privileges for the privilege set.

For details on the different privileges you can define, see:

•	Editing record access privileges

•	Editing layouts privileges

•	Editing value list privileges

•	Editing scripts privileges

•	Editing other privileges

4.	When you’ve finished editing this privilege set, click OK.

You see the Manage Security dialog box.

5.	Do one of the following:

•	If you’ve finished working with accounts and privileges, click OK. In the dialog box that appears, enter an account name and password that is assigned the Full Access privilege set, and click OK.

•	To assign the privilege set to one or more accounts, see Creating accounts or Editing existing accounts.

Notes

•	There are two other methods for enabling and disabling extended privileges:

•

While configuring sharing settings for FileMaker Network sharing, ODBC/JDBC, or FileMaker WebDirect, you can enable sharing for all users or certain privilege sets if your privilege set permits it. This method is accessible by any account assigned a privilege set with the Manage Extended Privileges via Sharing dialogs privilege enabled, so it can be accessed by accounts that are not assigned the Full Access privilege set. See Editing other privileges, Sharing databases on a network, Using ODBC and JDBC with FileMaker Pro, or Publishing databases with FileMaker WebDirect.

•	While editing an extended privilege, you can enable or disable the privilege sets that can access it. See Editing which privilege sets may use an extended privilege. (This method requires Full Access privileges.)

•	If you are hosting a FileMaker Pro database, the database must include the fmapp extended privilege. If you use the Upload Database assistant to upload a database to FileMaker Server and if no sharing is enabled, the Database Server enables fmapp for the Full Access privilege set.

•	Keywords for extended privileges that begin with “fm” are reserved by FileMaker.

Related topics 

Managing extended privileges

Viewing extended privileges