How to secure your data in FileMaker Pro web publishing 21
This calculation will determine if access is granted to this record. Access is allowed if the result of
the calculation is True, and access is denied if the result of the calculation is False. In this case,
access will be allowed if the field AccessType contains either the value Sales or the value
Manager.
16.
Click
OK
to save the calculation.
17.
Repeat steps 12 through 15 to create the same level of limited access for record editing and
record deletion privileges.
18.
Click
Create
to create the password manager_password with the privileges described above.
If a master password with full access has not already been defined, you will need to define one
before exiting this dialog box.
19.
Click
Done
.
20.
In the
Security
area of the Web Companion Configuration dialog box, verify that security is set
to
FileMaker Pro Access Privileges
as described in Specifying access privileges as the security
method for Instant Web Publishing on page 19.
21.
In each record of your database, set AccessType to either
Sales
or
Manager
, as appropriate.
When users access your database over the Web, they will only be permitted to browse, edit, and
delete the records to which their password gives them access. In Instant Web Publishing, when a
user does not have browse access to a particular record, the record will be shown, but
will be placed in all fields. If a user does not have delete or edit record privileges, those commands
will be removed from the navigation bar.
Specifying default layouts in databases published with Instant Web Publishing
Although not necessary, it will be easier for you to manage the web security of your database(s) if
you create web only layouts for table view, form view, and searching, and specify these layouts as
the defaults for these activities. These layouts should contain just the fields you intend to use for
each of these functions.
Note
The following layout preferences are not used when you suppress the Instant Web Publishing
navigation and command interface. If you suppress these controls, your users will be completely
dependent on your buttons and scripts to manage your database solutions when in a browser.
Important
Layouts are not intended to be used as security measures. Limiting the fields that are
displayed on web pages is part of a best practices approach, to minimize the accidental exposure
of fields to users on Instant Web Publishing pages. Regardless of which layouts are used, all fields
in the database are available to CGI requests from any web user, unless the proper access privileges
are applied to restrict access on a field by field basis. For more information on field by field
protection, see information in FileMaker Pro online Help on defining groups.
To specify default layouts using Instant Web Publishing:
1.
Choose
File
menu
> Sharing
.
2.
In the
Companion Sharing
area, select Web Companion, then click
Set Up Views.