Privilege sets can limit extended privileges, which determine whether and how a shared file is accessible.
1. Start editing a new or existing privilege set the Edit Privilege Set dialog box.
See Creating and editing privilege sets.
Note If the File menu > Manage > Security menu is dimmed, your privileges do not permit you to access it. See the note below for another possible way to edit extended privileges.
2. In the Extended Privileges list, select the extended privileges you want to enable, and clear the ones you want to disable.
The following table lists the default extended privileges that are available.
Keyword | Extended privilege | Determines if a privilege permits |
fmwebdirect | Access via FileMaker WebDirect | Accessing a database file from a web browser via FileMaker WebDirect (FileMaker Server and FileMaker Cloud products only). |
fmxdbc | Accessing a database file as an ODBC or JDBC data source. | |
fmapp | Access via FileMaker Network, server-side scripting, or FileMaker Go | Opening a shared file (either a file hosted by FileMaker Pro Advanced, FileMaker Server, or a FileMaker Cloud product). |
fmreauthenticate10 | Require re-authentication after the specified minutes in sleep/background | Accessing a file in FileMaker Pro Advanced or FileMaker Go without having to re-login after file hibernation or after using a different app. The default time is 10 minutes. |
fmxml | Access via XML Web Publishing | Accessing a database file from a web browser or other application via XML web publishing (FileMaker Server only). |
fmphp | Access via PHP Web Publishing | Accessing a database file from a web browser or other application via PHP web publishing (FileMaker Server only). |
fmrest | Access via FileMaker Data API | Accessing a database file from a web service via the FileMaker Data API (FileMaker Server and FileMaker Cloud products only). See FileMaker Data API Guide. |
fmextscriptaccess | Allow Apple events and ActiveX to perform FileMaker operations | Accessing a database file from another application. |
fmurlscript | Allow URLs to perform FileMaker scripts | Performing a script from a URL. |
fmodata | Access via OData | Accessing a database file from an OData-capable client application (FileMaker Cloud only). See FileMaker Cloud OData Guide. |
•Do not create extended privileges that begin with "fm"; keywords with this prefix are reserved by FileMaker.
•Enabling extended privileges only makes it allowable for certain privilege sets to access shared data. To actually access the shared data, you must also set up sharing for the type of access that you want. See Sharing files on a network, Sharing FileMaker Pro Advanced data via ODBC or JDBC, or Publishing databases on the web.
•While configuring sharing settings for FileMaker Network sharing, ODBC/JDBC, or FileMaker WebDirect, you can enable sharing for all users or certain privilege sets if your privilege set permits it. This method is accessible by any account access assigned a privilege set with the Manage extended privileges privilege enabled, so it can be accessed by account access that is not assigned the Full Access privilege set. See Editing other privileges, Sharing files on a network, Using ODBC and JDBC with FileMaker Pro Advanced, or Publishing databases with FileMaker WebDirect.
•If a file has been set to save the password in your Credential Manager (Windows) or keychain (macOS and iOS), and the fmreauthenticate extended privilege has been enabled, you will not be prompted for account information unless the password is invalid or the current account name does not match the account name stored in your Credential Manager or keychain.