The privilege set you set up for your other users can be configured to prohibit exporting data. I believe that will keep them from using import records from a new file to import the data. Scripts, on the other hand, should not be something they can import unless they have full access to the file from which they are importing the script.
Thanks for your reply!
However, someone can create a new FM database for their own, after that:
1. He can import data to his FM database file from my FM file, no need to export as you said
2. With script, he can also import all of my scripts without any rights
Please double-check and help me again this case
I found out in File Access Menu
Filemaker has a help page about security here
This is the Main Security page for FMP with an optional newsletter