Changing User Privilege Sets

Managing user accounts within FileMaker is pretty easy and straight forward. This, however, is an aspect of access control which only applies to what a user can do within the world of FileMaker's interface.

When it comes to your own solution's user interface, it doesn't exist until you create it. And, of course, FileMaker knows nothing about what you create. It's just a tool. This means it's up to you to add your own security controls.

In order to do this, you need to take advantage of all of FileMaker's security controls. Once you understand how to use these controls, you can create an access system which has various levels of access and allows some users to advance or reduce the access of other users. If you have a database which needs to have managers, employees and various levels of access then you need to watch this video.

AttachmentSize
ChangingUserPrivilegeSets.zip1.67 MB

Comments

What approach would you recommend when using external authentication services to control access to a hosted solution? I'm thinking of using MS Azure groups to establish group names for different groups (roles) of access. A group (permanent authID) would then represent a corresponding FileMaker privilege set. I would like to capture the individual user accounts (username) to help me identify user actions to mark record transactions during a login session according to account. Would a user table showing multiple privileges be possible under these constraints?

Do you have to delete a user to set a new password, or can you create a new temporary password with the same username.... A script similar to a "forgot password".

---- Nash