[FX.php List] FM accts vs. acct & password fields?

[Glenn Singleton]

William,

I am with you, in my case I have a combination of FM users AND web users, 
who need to be centrally administered by someone in FM (only) without access 
to "Manage Users".

So a combination of a users table that does not store any passwords and 
creating Filemaker accounts seemed the only option.

Is there a written spec on how many users filemaker can handle ? It is a 
database after all ;-> and that's what I thought it would be good at.

Just my 2c and what's sleep anyway ?

Regards
Glenn Singleton

----- Original Message ----- 
From: "william.downs" <william.downs at gmail.com>
To: "FX.php Discussion List" <fx.php_list at mail.iviking.org>
Sent: Friday, June 20, 2008 1:48 AM
Subject: Re: [FX.php List] FM accts vs. acct & password fields?


> Hi Joel,
>
> I personally don't see any risk really or trouble in creating FM
> accounts - IF you assign a Privilege Set with only XML extended
> Privileges - which is scriptable anyway.
>
> it's true that you may have a lot of Filemaker Accounts - but as it
> is used for Authentication I like that idea. The same script can
> create a User record in the Users table AND create an FM account -
> this then stops anyone from knowing the Users password - which would
> not be the case if it is stored in a table
>
> After a successful login, I set the users login details in SESSION
> variables -
>
> Of course, it has once again been over a week since I slept properly
> - so I may be (most likely) missing something - please feel free to
> call me a monkey.
>
> Kindest Regards,
>
> William
>
> On 17 Jun 2008, at 03:43, Joel Shapiro wrote:
>> Thanks Dale & Bob
>>
>> Yeah I agree that creating FM accts would be too much trouble and
>> too much unnecessary risk.  Plus, if there are gonna be a lot of
>> users, that would be a lot of FM accts, which just seems like
>> bulk.  Plus if the web file is separate from the data file, the
>> script would need to create the accounts in both -- and check for
>> uniqueness through FileMaker errors -- and... phew!
>>
>> Good.  You've helped me think it through more.
>>
>> -Joel
>>
>>
>> On Jun 16, 2008, at 7:28 PM, Dale Bengston wrote:
>>
>>> Hi Joel,
>>>
>>> We do it table-based. Access to FileMaker accounts is not
>>> something I'd personally feel good about opening up to web users.
>>>
>>> Dale
>>>
>>> On Jun 16, 2008, at 8:47 PM, Joel Shapiro wrote:
>>>
>>>> Hi all
>>>>
>>>> A FileMaker colleague has asked me about a new php project of his
>>>> in which users will create their own accounts via the website.
>>>> He's thinking that the user accounts would be actual FileMaker
>>>> accounts.  I would think that a User table with username and
>>>> password fields would be the way to go, but I wanted to check if
>>>> anybody here creates FM accounts for website users.  Does
>>>> anybody??  Or anyone have any relevant comments?  (I don't know
>>>> their anticipated number of users.)
>>>>
>>>> TIA,
>>>> -Joel
>>>> _______________________________________________
>>>> FX.php_List mailing list
>>>> FX.php_List at mail.iviking.org
>>>> http://www.iviking.org/mailman/listinfo/fx.php_list
>>>
>>> _______________________________________________
>>> FX.php_List mailing list
>>> FX.php_List at mail.iviking.org
>>> http://www.iviking.org/mailman/listinfo/fx.php_list
>>
>> _______________________________________________
>> FX.php_List mailing list
>> FX.php_List at mail.iviking.org
>> http://www.iviking.org/mailman/listinfo/fx.php_list
>
> _______________________________________________
> FX.php_List mailing list
> FX.php_List at mail.iviking.org
> http://www.iviking.org/mailman/listinfo/fx.php_list


--------------------------------------------------------------------------------



No virus found in this incoming message.
Checked by AVG.
Version: 8.0.100 / Virus Database: 270.4.1/1510 - Release Date: 6/19/2008 
3:21 PM