Security hole: $$Variables are visible in the data viewer when a file is minimized (13 Comments)

Issue report by MrWatson

Product

FileMaker Pro

Version

All versions since FM 12

Operating system version

Mac and Win

Description of the issue

When you open a database with non-full access and open the data viewer you are correctly blocked from seeing the variables. HOWEVER if you minimize the window, you can suddenly see all the $$variables !!! :-(((

Steps to reproduce the problem

Make a database
add a user account with non full access privileges
create an OnFirstWindowOpen script to define $$PrivateVariable="secret"
set the file options to log in with this account and to run this script
close the file
open the file
start the data viewer
minimize the file

Expected result

NO information

Actual result

$$PrivateVariable="secret"

Exact text of any error message(s) that appear

none

Configuration information

any mac or win

Workaround

none