There is no such command SET ALLOWED COMMANDS, only SET ALLOWED METHODS which 
only works on methods. If you allow users to enter "QUERY" then they can also 
enter DELETE SELECTION. The documentation says:

> If you would like the user to be able to call 4D commands that are 
> unauthorized by default or plug-in commands, you must use specific methods 
> that handle these commands. 
> Note: The mechanism for filtering access to commands and methods in the 
> Formula editor can be disabled for all users or for the Designer and 
> Administrator via an option on the "Security" page of the Database Settings. 
> If the "Disabled for all" option is checked, the SET ALLOWED METHODS command 
> will have no effect.


John DeSoi, Ph.D.


> On Dec 20, 2018, at 2:15 PM, David Ringsmuth <davidi...@gmail.com> wrote:
> 
> SET ALLOWED COMMANDS should also work for 4D commands, since if a user is 
> allowed to enter expressions, than those expressions should be restrictable.

**********************************************************************
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**********************************************************************

Reply via email to