Security
Security in SeedCode_Subscribe_Setup.fmp12
If you choose to host the SeedCode_Subscribe_Setup.fmp12 file on a server (which is required if you're publishing any calendars using the private link option), we advise that you restrict access to the file by adding a password to the Admin account at the minimum.
The Private Link uses the "Guest" account in SeedCode_Subscribe_Setup.fmp12, so that must remain enabled. The Guest account uses a privilege set called "XML Only", which is set up to only allow access via XML (not FileMaker or PHP). The "XML Only" privilege set has limited access to tables and layouts, primarily gathering its data from the "CalendarXML" layout.
Security in Your Files
Since the calendars published from your files are read only, there is no need for users to log into them with accounts that allow records to be edited. This is especially true if you're using private URLs like you would with Google.
We recommend that you create simple, read-only accounts for users to employ when subscribing to calendars. Just a few things to keep in mind about these accounts and the privileges sets they are tied to:
