AnsweredAssumed Answered

Security problem with View Databases Hosted by FileMaker Server

Question asked by _ian on Apr 14, 2009
Latest reply on Apr 14, 2009 by TSDiva

Summary

Security problem with View Databases Hosted by FileMaker Server

Description of the issue

Our FileMaker Servers are configured to require users to enter user name and password in order to see the database files. In other words in the Security tab of the Database Server configuration on the Server Admin tool we've got "List only the databases that each user can see" selected. When using FileMaker 10.0v1 running on OS X 10.5.6 and opening remote it does ask for the user name and password but if you move the password dialog out of the way it displays all of the database files in the open remote dialog box. Since the password dialog box is modal it's not possible to interact with the listed files, but it is possible to see them which is a bit of a security problem. Our FileMaker Servers are a mix of versions 9.0.3.325 and v10.0.1.64  I can provide a screen shot that illustrates the problem, but there doesn't seem to be a way to provide one in this forum. cheersIan 

Outcomes