>We have recently moved some of our clients to a Cloud server, accessing our VFP9 app via Remote Desktop / Remote Web App.
>
>Since we can no longer automate Outlook, I have created a small Email Client within our application. The problem is that the clients want to attached merge documents created in our app to their emails.
>
>This is not an issue if I create the document and pass it to the mail client, but there are situation where the user needs to navigate to a folder and select a file. Normally I would simply use GetFile(), but under Remote Desktop this does not seem to be honoring the user rights so they can navigate all over the server(s) - which is clearly not acceptable as they could rename/delete etc.
>
>How can I restrict GetFile() to user folder or local folder only?

You can't do this in VFP, you have to lock down security on your cloud server(s).

If you're using two separate accounts per user - one to log on to their local machine, and another to get into their RDP session, you will need to ensure that neither account has more permissions on the server(s) than required to run your app.