Privilege sets can limit extended privileges, which determine whether and how a shared file is accessible.
1. Start editing a new or existing privilege set the Edit Privilege Set dialog box.
See Creating and editing privilege sets.
Note If the File menu > Manage > Security menu is dimmed, your privileges do not permit you to access it. See the note below for another possible way to edit extended privileges.
2. In the Extended Privileges list, select the extended privileges you want to enable, and clear the ones you want to disable.
The following table lists the default extended privileges that are available.
Keyword | Extended privilege | Determines if a privilege permits |
fmwebdirect | Access via FileMaker WebDirect | Accessing a database file from a web browser via FileMaker WebDirect. |
fmxdbc | Accessing a database file as an ODBC or JDBC data source. | |
fmapp | Access via FileMaker Network, server-side scripting, or FileMaker Go | Opening a shared file (either a file shared by FileMaker Pro Advanced or hosted and shared by FileMaker Server). |
fmreauthenticate10 | Require re-authentication after the specified minutes in sleep/background | Accessing a file in FileMaker Pro Advanced or FileMaker Go without having to re-login after file hibernation or after using a different app. The default time is 10 minutes. |
fmxml | Access via XML Web Publishing - FMS only | Accessing a database file from a web browser or other application via XML web publishing - FileMaker Server only. |
fmphp | Access via PHP Web Publishing - FMS only | Accessing a database file from a web browser or other application via PHP web publishing - FileMaker Server only. |
fmrest | Access via FileMaker Data API - FMS only | Accessing a database file from a web service via the FileMaker Data API - FileMaker Server only. See FileMaker Data API Guide. |
fmextscriptaccess | Allow Apple events and ActiveX to perform FileMaker operations | Accessing a database file from another application. |
fmurlscript | Allow URLs to perform FileMaker scripts | Performing a script from a URL. |
•Do not create extended privileges that begin with "fm"; keywords with this prefix are reserved by FileMaker.
•Enabling extended privileges only makes it allowable for certain privilege sets to access shared data. To actually access the shared data, you must also set up sharing for the type of access that you want. See Sharing files on a network, Sharing FileMaker Pro Advanced data via ODBC or JDBC, or Publishing databases on the web.
•While configuring sharing settings for FileMaker Network sharing, ODBC/JDBC, or FileMaker WebDirect, you can enable sharing for all users or certain privilege sets if your privilege set permits it. This method is accessible by any account assigned a privilege set with the Manage extended privileges privilege enabled, so it can be accessed by accounts that are not assigned the Full Access privilege set. See Editing other privileges, Sharing files on a network, Using ODBC and JDBC with FileMaker Pro Advanced, or Publishing databases with FileMaker WebDirect.
•If a file has been set to save the password in your vault (Windows) or keychain (macOS and iOS), and the fmreauthenticate extended privilege has been enabled, you will not be prompted for account information unless the password is invalid or the current account name does not match the account name stored in your vault or keychain.