14 Replies Latest reply on May 12, 2015 9:16 AM by TSGal

    Security hole: $$Variables are visible in the data viewer when a file is minimized

      Summary

      Security hole: $$Variables are visible in the data viewer when a file is minimized

      Product

      FileMaker Pro

      Version

      All versions since FM 12

      Operating system version

      Mac and Win

      Description of the issue

      When you open a database with non-full access and open the data viewer you are correctly blocked from seeing the variables. HOWEVER if you minimize the window, you can suddenly see all the $$variables !!! :-(((

      Steps to reproduce the problem

      Make a database
      add a user account with non full access privileges
      create an OnFirstWindowOpen script to define $$PrivateVariable="secret"
      set the file options to log in with this account and to run this script
      close the file
      open the file
      start the data viewer
      minimize the file

      Expected result

      NO information

      Actual result

      $$PrivateVariable="secret"

      Exact text of any error message(s) that appear

      none

      Configuration information

      any mac or win

      Workaround

      none