Protecting databases > Creating and editing privilege sets > Editing extended privileges for a privilege set
 
Editing extended privileges for a privilege set
Privilege sets can limit extended privileges, which determine whether and how a shared file is accessible.
To edit extended privileges for a privilege set:
1. Start editing a new or existing privilege set the Edit Privilege Set dialog box.
See Creating and editing privilege sets.
Note  If the File menu > Manage > Security menu is dimmed, your privileges do not permit you to access it. See the note below for another possible way to edit extended privileges.
2. In the Extended Privileges list, select the extended privileges you want to enable, and clear the ones you want to disable.
The following table lists the default extended privileges that are available.
 
Keyword
Extended privilege
Determines if a privilege permits
fmwebdirect
Accessing a database file from a web browser via FileMaker WebDirect.
fmxdbc
Access via ODBC/JDBC
Accessing a database file as an ODBC or JDBC data source.
fmapp
Access via FileMaker Network, server-side scripting, or FileMaker Go
Opening a shared file (either a file shared by FileMaker Pro or hosted and shared by FileMaker Server).
fmreauthenticate10
Require re-authentication after the specified minutes in sleep/background
Accessing a file in FileMaker Pro or FileMaker Go without having to re-login after file hibernation or after using a different app. The default time is 10 minutes.
fmxml
Access via XML Web Publishing - FMS only
Accessing a database file from a web browser or other application via XML web publishing - FileMaker Server only.
fmphp
Access via PHP Web Publishing - FMS only
Accessing a database file from a web browser or other application via PHP web publishing - FileMaker Server only.
fmscriptdisabled
Disable AppleScript and ActiveX from performing FileMaker scripts
Preventing other applications from performing FileMaker scripts.
3. Click OK, then click OK in the Manage Security dialog box.
Notes
•Do not create extended privileges that begin with "fm"; keywords with this prefix are reserved by FileMaker.
•Enabling extended privileges only makes it allowable for certain privilege sets to access shared data. To actually access the shared data, you must also set up sharing for the type of access that you want. See Sharing files on a network, Sharing FileMaker Pro data via ODBC or JDBC, or Publishing databases on the web.
•While configuring sharing settings for FileMaker Network sharing, ODBC/JDBC, or FileMaker WebDirect, you can enable sharing for all users or certain privilege sets if your privilege set permits it. This method is accessible by any account assigned a privilege set with the Manage extended privileges privilege enabled, so it can be accessed by accounts that are not assigned the Full Access privilege set. See Editing other privileges, Sharing files on a network, Using ODBC and JDBC with FileMaker Pro, or Publishing databases with FileMaker WebDirect.
•If a file has been set to save the password in your credentials (Windows) or keychain (OS X and iOS), and the fmreauthenticate extended privilege has been enabled, you will not be prompted for account information unless the password is invalid or the current account name does not match the account name stored in your credentials or keychain.
Related topics 
About accounts, privilege sets, and extended privileges
Creating and editing extended privileges
Scripting with ActiveX Automation (Windows)
Scripting with Apple events (OS X)
Was this topic helpful? Send feedback.