Home > Designing and creating solutions > Protecting databases > Managing privilege sets > Editing extended privileges for a privilege set

Editing extended privileges for a privilege set

Privilege sets can limit extended privileges, which determine whether and how a shared file is accessible. For a file, you can set whether a privilege set is permitted to:

•	open a shared file with the File menu > Open Remote command

•	access a database file from a web browser via FileMaker WebDirect

•	access a database file as an ODBC or JDBC data source

•	access a database hosted on FileMaker Server

•	access a database file in FileMaker Pro or FileMaker Go without having to re-login

•	access any other features controlled through additional extended privileges that may be defined

Note  Enabling extended privileges only makes it allowable for certain privilege sets to access shared data. To actually access the shared data, you must also set up sharing for the type of access that you want. See Sharing files on a network, Sharing FileMaker Pro data via ODBC or JDBC, or Publishing databases on the web.

For more information about extended privileges, see About accounts, privilege sets, and extended privileges.

To edit extended privileges for a privilege set:

1.	Start editing a new or existing privilege set the Edit Privilege Set dialog box.

See Creating and editing privilege sets.

Note  If the File menu > Manage > Security menu is dimmed, your privileges do not permit you to access it. See the note below for another possible way to edit extended privileges.

2.	In the Extended Privileges list, select the extended privileges you want to enable, and clear the ones you want to disable.

The following table lists the default extended privileges that are available.

 

Keyword	Extended privilege	Determines if a privilege permits
fmwebdirect	Access via FileMaker WebDirect	Accessing a database file from a web browser via FileMaker WebDirect.
fmxdbc	Access via ODBC/JDBC	Accessing a database file as an ODBC or JDBC data source.
fmapp	Access via FileMaker Network, server-side scripting, or FileMaker Go	Opening a shared file (either a file shared by FileMaker Pro or hosted and shared by FileMaker Server).
fmreauthenticate10	Require re-authentication after the specified minutes in sleep/background	Accessing a file in FileMaker Pro or FileMaker Go without having to re-login after file hibernation or after using a different app. The default time is 10 minutes.
fmxml	Access via XML Web Publishing - FMS only	Accessing a database file from a web browser or other application via XML web publishing - FileMaker Server only.
fmphp	Access via PHP Web Publishing - FMS only	Accessing a database file from a web browser or other application via PHP web publishing - FileMaker Server only.

Note  FileMaker Pro no longer supports the fmiwp extended privilege. Opening database files created in FileMaker Pro 12 or earlier that use the fmiwp extended privilege does not remove the extended privilege from the privilege sets it is assigned to.

FileMaker as well as third-party developers may provide additional extended privileges as part of additional software products designed to work with FileMaker Pro or FileMaker Server.

3.	Click OK, then click OK in the Manage Security dialog box.

Or, to assign the privilege set to one or more accounts, see Creating and editing accounts.

Notes

•	There are two other methods for enabling and disabling extended privileges:

•

While configuring sharing settings for FileMaker Network sharing, ODBC/JDBC, or FileMaker WebDirect, you can enable sharing for all users or certain privilege sets if your privilege set permits it. This method is accessible by any account assigned a privilege set with the Manage Extended Privileges via Sharing dialogs privilege enabled, so it can be accessed by accounts that are not assigned the Full Access privilege set. See Editing other privileges, Sharing files on a network, Using ODBC and JDBC with FileMaker Pro, or Publishing databases with FileMaker WebDirect.

•	While editing an extended privilege, you can enable or disable the privilege sets that can access it. See Managing extended privileges. (This method requires Full Access privileges.)

•

If you are hosting a FileMaker Pro database, the database must include the fmapp extended privilege. In FileMaker Pro, choose File menu > Sharing > Upload to FileMaker Server to upload a database to FileMaker Server. If no sharing is enabled, the Database Server enables fmapp for the Full Access privilege set.

•	Keywords for extended privileges that begin with “fm” are reserved by FileMaker.

•

If a file has been set to save the password in your credentials (Windows) or keychain (OS X and iOS), and the fmreauthenticate extended privilege has been enabled, you will not be prompted for account information unless the password is invalid or the current account name does not match the account name stored in your credentials or keychain.

Related topics 

Managing extended privileges