Improving FileMaker Server Security by Filtering which Databases are Displayed to Users


To maximize security, even within an organization, sometimes it is a good idea to filter which databases are displayed to users logging in. There is a simple setting in the FileMaker Server Admin Console to set this up.

Turning on File Display Filter

wpid2140-media_1305954871933.png
  1. Log into FileMaker Server Admin Console.
  2. Select ‘Database Server’ in the left hand list.
  3. Click on the ‘Security’ tab
  4. In the File Display Filter area, click on ‘List only the database each user is authorized to access’ option

Without Filtering

wpid2141-media_1305955013957.png

Without the filtering turned on, any user logging in will see the complete list of databases hosted on this FileMaker Server.

Apologies for all the blurred out parts of the screenshot above, but these are real clients. Hopefully you can get the idea, the 1) Host databases are in the list on the left and the databases are displayed in the 2) Available Files on the left. An unfiltered list would display all the databases on the host server.

With Filtering

wpid2146-media_1305955609723.png

Turning filtering on limits the databases the user can view to just those to which they have a password.

Note: If a user does have access to more than one database, but needs to see them all, make sure that they are using the same user name and password in all databases to ensure they show up in their filtered list, when the server Filtering is turned on.

Improving life for your users: Avoiding the Dual Login

wpid2142-media_1305955389965.png

When Database Filtering is turned on, one of the downsides is that the user is faced with a dual login procedure.

User Logs in to the database Server

wpid2143-media_1305955425226.png

The first step establishes your credentials and allows the database server to determine which database you have a right to view.

Select a database

wpid2147-media_1305955747411.png

Note: Add to Favorite button will create a short cut to this file, avoiding the dual login process.

Log in to the actual database

wpid2144-media_1305955469858.png

The second step, the user is actually logging in to the database.

The Shortcut to avoid a dual login

wpid2145-media_1305955497552.png

Fortunately there are a couple of ways around this dual login. The first is to click the Add to Favorites button in the first screen with the database is first being opened. The second method is to employ the ‘Open Recent’ command instead of the ‘Open Remote’ command from the File Menu.

Advertisements

Comments are closed.

%d bloggers like this: