AnsweredAssumed Answered

Security hole: $$Variables are visible in the data viewer when a file is minimized

Question asked by disabled_mrw-old-account-do-not-use on Jun 4, 2014
Latest reply on May 12, 2015 by TSGal

Summary

Security hole: $$Variables are visible in the data viewer when a file is minimized

Product

FileMaker Pro

Version

All versions since FM 12

Operating system version

Mac and Win

Description of the issue

When you open a database with non-full access and open the data viewer you are correctly blocked from seeing the variables. HOWEVER if you minimize the window, you can suddenly see all the $$variables !!! :-(((

Steps to reproduce the problem

Make a database
add a user account with non full access privileges
create an OnFirstWindowOpen script to define $$PrivateVariable="secret"
set the file options to log in with this account and to run this script
close the file
open the file
start the data viewer
minimize the file

Expected result

NO information

Actual result

$$PrivateVariable="secret"

Exact text of any error message(s) that appear

none

Configuration information

any mac or win

Workaround

none

Outcomes