4D Doc Center : Security page

Home

4D v14.3

4D Design Reference

Database settings

Security page

This page contains options related to data access and protection for your database.

Data Access

Design Access: Gives the specified group the ability to enter the Design environment of the database.
Note that:
- Setting an access group in the Design environment also lets you deactivate the Create table option in the data import dialog box. For more information about this dialog box, refer to Importing data from files.
- The Designer and Administrator always have access to the Design environment, even if they are not explicitly part of the specified access group.
For more information about users and user groups, refer to the Users and groups chapter.

Filtering of commands and project methods in the formula editor:
For security reasons, by default 4D restricts access to the commands, functions and project methods in the in Application mode: on certain 4D functions and project methods that have been explicitly declared using the SET ALLOWED METHODS command can be used. You can completely or partially remove this filtering using the following options.
- Enabled for all (default option): Access to commands, functions and project methods is restricted for all users in Application mode, including the Designer and the Administrator.
- Disable for the Designer and the Administrator: This option grants full access to 4D commands and to methods in the Formula editor only for the Designer and Administrator. It can be used to set up an unlimited access mode to commands and methods while remaining in control of the operations carried out. During the development phase, this mode can be used to freely test all the formulas, reports, and so on. During operation, it can be used to set up secure solutions that allow access to commands and methods on a temporary basis. This consists in changing the user (via the CHANGE CURRENT USER command) before calling a dialog box or starting a printing process that requires full access to the commands, then returning to the original user when the specific operation is completed.
  Note: If full access has been enabled using the previous option, this option will have no effect.
- Disabled for all: This option disables control of user actions in the formula editor. When this option is checked, users have access to all the 4D commands and plug-ins as well as all project methods (except for invisible ones).
  Note: This option takes priority over the SET ALLOWED METHODS command. When it is checked, this command does nothing.

Default User: When a Default User has been set, every user that opens the database or logs onto it has the same access privileges and restrictions defined for this Default User. It is no longer necessary to enter a user name. Moreover, if you have not associated a password with the Default User, the Password dialog box no longer appears and the database opens directly.
This option simplifies access to the database while maintaining a complete data control system.
This option simplifies access to the database while maintaining a complete data control system.
- If you have associated a password with the Default User, a dialog box appears when the database is opened and the users must enter a password:
- If you haven’t associated a password with the Default User, the above dialog box will not appear.
Note: You can “force” the display of the User Identification dialog box when the “Default User” mode is active, for instance in order to connect as Administrator or Designer. To do so, press the Shift key while opening the database or connecting to it.

Display User List in Password Dialog Box: If this option is checked, users must choose their name from the list of users and enter their password in the User Identification dialog box. If it is not checked, users must enter both their name and password. For more information about the two versions of the password dialog box, see the section “Access system overview” in Access system overview.
- User List in Alphabetical Order (only available if the previous option is checked): When this option is checked, the list of users in the password entry dialog box is sorted by alphabetical order.

The user can change their password: When this option is checked, a Change button is displayed in the User Identification dialog box. This button lets the user access a dialog box that can be used to change their password (for more information about this dialog box, refer to the “Modification of password by user” in Ensuring system maintenance). If desired, you can hide the Change button so that users cannot modify their passwords. To do so, just uncheck this option.

Options

Enable User Settings in External File: You need to check this option to be able to externalize user settings. When this option is checked, two dialog boxes are available for defining settings: Structure Settings and User Settings. For more information, refer to Using user settings.

Execute "On Host Database Event" method of the components: The On Host Database Event database method facilitates the initialization and backup phases for 4D components. For security reasons, you must explicitly authorize the execution of this method in each host database. To do this, you must check this option. By default, it is not checked.
When this option is checked:
- 4D components are loaded,
- each On Host Database Event database method of the component (if any) is called by the host database,
- the code of the method is executed.
When it is not checked:
- 4D components are loaded but they have to manage their initialization and backup phases themselves.
- the developer of the component has to publish the component methods that must be called by the host database during these phases (startup and shutdown).
- the developer of the host database must call the appropriate methods of the component at the right time (must be covered in the component documentation).