With over 160 users with individual accounts and many modules, I need some way of allowing and restricting access not only to each module but to specific parts within each module. So, I have created a privilege set called "modular_security" and the security module to manage the security without having to hard code a new privilege set into my file. I just use the employee module to add an employee record and scripts create an account for that user and then in the security module a user with security permissions can add the new user to a group and also edit the permissions belonging to a group, or even add a specific permission directly to a user. At login, a script wipes and repopulates global fields that the FileMaker Permissions reference for access. The modular_privilege set does not have write access to the global fields so the script runs as full access. Is this safe? FileMaker has no server side variables so I'm hoping that global fields aren't easily hacked or overwritten.
Thank you for your help!