Using the Web Security Database    35

Protecting specific records in a database using the Web Security Database

The ExactSearch, ExactUpdate, and ExactDelete field restrictions provide record level security for 

your databases on the Web. You can limit web user access to specific records in your databases by 

creating a special field value for those records that only authorized users know, and applying the 

ExactSearch, ExactUpdate, or ExactDelete field restrictions to the field. Web users are required to 

enter the correct value in a search, and only those records containing the value can be displayed, 

edited, or deleted. By adding the DontShow field restriction to the field, unauthorized web users 

will not be able to see the value when the records are displayed. 

Note  

When using the ExactSearch restriction for any field, the 

 findall

 and 

 findany

 actions 

cannot be used with that database.

The ExactSearch, ExactUpdate, and ExactDelete field restrictions can also be applied to related 

fields by adding the relationship name and a double colon to the field name. Web users must enter 

a non blank value for the related field when searching the database. The value cannot contain any 

FileMaker Pro wildcard or range search characters (*, @, !, =, //,  .. , or  ... ).

Note

  See  Record by record protection with the Web Security Database  on page 24 for additional 

examples of how to implement this protection.

To protect specific records in a database using the Web Security Database:

1. 

In FileMaker Pro, define a field in the database to contain the special field value.

YourSecretCode:

2. 

Enter the special field value for the field in each specific record you want to protect.

YourSecretCode:

 ch5rries

3. 

In a text editor or HTML authoring program, create an HTML text field in your search web page. 

Include the equals operator in the search string, and use the same name as the field you defined in 

the database.

Enter your secret code here

4. 

In the Web Security.fp5 database, type the name of the field in the 

Field Name

 field, and select 

the 

DontShow

 and 

ExactSearch

 field restrictions.

If you're setting restrictions for a related field, type the relationship name, a double colon, and then 

the field name in the 

Field Name

 field.

relationship::YourSecretCode

Now, in order to retrieve the protected records, web users must type the special field value in the 

HTML text field on the search page.