6 Replies Latest reply on Jun 29, 2013 11:09 AM by Stephen Huston

    Privilege Sets

    ptrc

      So I am stumped.

       

      I have a table where in the privilege set is marked no to edit. This tabled is viewed through a portal. If I create a new record and I commit the record, I can still edit. I can continue to edit until I log out and then back in. I cannot edit previously created records, but only the ones I create during that session.

       

      What am I missing?

       

      Peter

        • 1. Re: Privilege Sets
          mikebeargie

          Peter, it sounds like you've left the "allow create" on for the table. If you don't want edit abilities I would suggest disabling "create" as well.

           

          What is happening is it is allowing them to edit the record during creation, before the record is committed to the database. After the record is committed, it falls under the "edit" rule you set.

           

          Try disabling under the "create" column in the table priv. settings and see if that works for you.

          • 2. Re: Privilege Sets
            ptrc

            HI Mike,

             

            I see your point, but why would I be able to edit them once I have committed the records?

             

            Peter

            • 3. Re: Privilege Sets
              mikebeargie

              newly created but un-committed records "technically" do not exist yet in your database. It's a transactional system, until you complete the transaction the data is not saved, so the rules do not apply to it.

               

              I am thinking that you are able to edit records you have created, but NOT committed. Try creating a record, not making any changes, and clicking outside of whatever field the cursor is in (to exit/commit the record), then try to edit again. Can you edit now? Or could you only edit immediately after the record was created and you were in a field?

               

              Turning off the "create" privilege allows you to account for this transactional rule, and avoid any confusion. It should be turned off anyways from what you've explained about your solution, unless I misread that you wanted your users to create a bunch of blank records somewhere in a table?

              • 4. Re: Privilege Sets
                AlanStirling

                Hi Mike

                 

                It is understood that records set to Can Create and Can't Edit in the Privilege set for Tables allow users to generate new records and edit those records generated during that session until the file is closed.

                 

                Once the file has been closed and re-opened, then all records are locked and cannot be edited - but new records can be created and edited (until the file is closed).

                 

                This is unaffected by un-committed or committed records - they can all be edited if generated in the current session.

                 

                ptrc, you may want to turn off Create as well as Edit and see if a script set to 'Full Access Privileges' will allow you to generate and manipulate new records in the way that you want.

                 

                Best wishes - Alan Stirling, London UK.

                 

                 

                Alan Stirling Technology Ltd, 135 Lisson Grove, London NW1 6UP

                +44 (0) 20 7724 2456 - alan@ast.fm - www.ast.fm.

                FileMaker Certified Developer for versions 7, 8, 9, 10, 11 and 12.

                • 5. Re: Privilege Sets
                  mikebeargie

                  Alan, I could have sworn I've seen different behavior, but I've almost never used a combination of privileges in that manner. Any documentation that points to this behavior (I can take your word, but I hate the "it is understood" catchphrase), as it's not listed in the official guide:

                  http://www.filemaker.com/12help/html/passwords.14.20.html#1028570

                   

                  Although it does state:

                  Note  Avoid creating inconsistent combinations of view, edit, create, and delete privileges.

                   

                  I created a sample file on my mac to play around and ran into an interesting behavior. The attached file logs on as "test" (no password), with a "test" privilege set, set to allow view, create and delete with access to all fields, but EDIT is turned off. Create new record is completely blocked in this setting, no new record creation is possible. you can log in holding down option, admin (no pass) to verify I set up the priv. set correctly.

                   

                  Was this behavior different in 11 than it is in 12?

                  • 6. Re: Privilege Sets
                    Stephen Huston

                    If you want to limit editing of newly-created records during the same session, see the discussion from earlier this week at:

                     

                    https://fmdev.filemaker.com/message/118897#118897