Managing security > Creating and editing privilege sets > Editing other privileges
 

Editing other privileges

1. Start editing a new or existing privilege set the Edit Privilege Set dialog box.

See Creating and editing privilege sets.

2. In the Other Privileges area, set one or more of the following options.

 

To

Do this

Allow printing.

Allow saving records as a PDF file.

Allow printing using the Print from Finder Apple event.

Choose Allow printing.

Allow exporting records.

Allow saving records as an Excel file.

Allow copying all records in the found set to the Clipboard.

Allow importing records from a FileMaker file.

Allow saving a copy of records.

macOS: Allow querying of data using the following Apple events: GetCellValue, Field Contents, Record Value, Table Contents, and Layout Contents.

Choose Allow exporting.

Note  In Windows, clearing this option has no effect on ActiveX Automation. In macOS, clearing this option only prohibits Apple events that access data; other Apple events will still work.

Allow users of this privilege set to enable and disable extended privileges when setting up FileMaker Network sharing, web publishing, and ODBC/JDBC sharing via the File menu > Sharing commands.

Allow users of this privilege set to edit extended privileges in the Advanced Security Settings dialog box when they choose File menu > Manage > Security.

Choose Manage extended privileges. To enable access to the Advanced Security Settings dialog box, also set Available menu commands to All.

This privilege does not allow users to open the Manage Security dialog box.

Allow users to:

view all account access entries in the Manage Security dialog box

create, modify, and delete account access entries that don’t have the Full Access privilege set

assign any existing privilege set except Full Access

Choose Manage accounts that don’t have Full Access and set Available menu commands to All.

This privilege does not allow users to:

assign the Full Access privilege set to any account access entry or to remove it from any entry

change the priority of account access entries

open the Advanced Security Settings dialog box, which means they can’t view the settings of, create, modify, or delete privilege sets, extended privileges, or file access

Allow entering data that doesn’t match the validation options set for a field.

Choose Allow user to override data validation warnings.

Note  This setting is ignored when a field is defined to prohibit field validation overrides (by clearing the Allow user to override validation option). See Defining field validation.

Disconnect the user of a shared file from FileMaker Server or the FileMaker Cloud product when the user is idle. (This typically improves FileMaker Server performance.)

Choose Disconnect user from server when idle.

Note  If you’re hosting shared files with FileMaker Server or a FileMaker Cloud product, see About disconnecting users when idle.

Allow users of this privilege set to change their password (FileMaker file accounts only).

Choose Allow user to modify their own password.

Require users of this privilege set to change their password after a certain number of days (FileMaker file accounts only).

(When the number of days has elapsed, the next time each user opens the file, a Change Password dialog box will appear. The user must change the password in order to open the file.)

Choose Must be changed every <n> days, and enter the number of days.

Note  If you choose this option without also choosing Allow user to modify their own password, then an account with Full Access privileges must change the password instead of the account assigned this privilege set. (In most cases, you should either choose or clear both options together.)

Specify a minimum character length for new passwords (FileMaker file accounts only).

Choose Minimum password length, and enter the number of characters.

Specify that only a limited set of menu commands are available when the file is active.

For Available menu commands, choose one of the following:

All to enable all menu commands except those specifically disabled by other privilege set options.

Editing only to enable only basic editing commands in Browse mode.

Minimum to disable all menu commands except those that open, close, and create database files, switch between database windows, perform scripts, open FileMaker Pro Help, or change preference options.

Comparison of privileges to change account access

The following table compares the Full Access privilege set and the two privileges that permit a user to make limited changes to account access.

 

Are these changes permitted?

For account access with the Full Access privilege set

For account access with the Manage accounts that don’t have Full Access privilege

For account access with the Manage extended privileges privilege

View, grant, and remove account access

Yes

Yes, except those with the Full Access privilege set

No

Duplicate account access

Yes

No

No

Change priority of account access

Yes

No

No

Change privilege set assignments

Yes

Yes, except for the Full Access privilege set

No

Create privilege sets

Yes

No

No

Modify and delete privilege sets

Yes

No

Only to create or modify extended privileges for existing privilege sets

Notes 

The password change and password character length privileges described above apply only to FileMaker file accounts, not external server accounts. See Creating and editing account access.

Even if you set Available menu commands to Editing only, record access privileges and layouts privileges can still prohibit the editing of certain fields, records, and data on certain layouts. See Editing record access privileges and Editing layouts privileges.

Setting Available menu commands to Editing only or Minimum disables the Window menu > New Window command, which prohibits users from opening new windows. Limiting the available menu commands may be useful if you want to control the ability of users to open additional windows. (You can create scripts that allow users to open certain windows. See Creating and editing scripts.)

Related topics 

Using the predefined privilege sets