MACROMEDIA COLDFUSION 5-ADVANCED ADMINISTRATION, Manual

Page: 125 / 372

An Example of ColdFusion Studio Security 107
•
C_R_FILE
•
C_W_FILE
•
C_DEVELOPMENT_R_FILE
•
C_DEVELOPMENT_W_FILE.
Now the MARS policy has access rights to the
mars_dsn
and all files in the
c:\development\mars directory and sub directories.
3 For VENUS we want to add the following rules:
•
VENUS_DSN
•
VENUS_R_DIRECTORY
•
VENUS_W_DIRECTORY
•
VENUS_R_FILES
•
VENUS_W_FILES
•
C_R_FILE
•
C_W_FILE
•
C_DEVELOPMENT_R_FILE
•
C_DEVELOPMENT_W_FILE.
Now the VENUS policy has access rights to the
venus_dsn
and all files in the
c:\development\venus
directory and sub directories.
Notice we did not add any of the wildcard rules named ALL_ , which protect all data
sources and files. The policies only have access to the resources explicitly defined in
their member rules. However, the policies have rules, but users still don’t have access.
The next step is assigning users and groups to the policies.
Assigning users/groups to policies
The last step in defining security for this example, is to add users and groups to the
policies you created.
To add users and groups to policies:
1 From the Policy page select the MARS policy and click the Users button. The
Users page indicates that no users are currently assigned to the policy. If you have
defined multiple user directories, select the directory in the list box that you want
to add users from, and then click the Add/Remove button.
2 Now you see a list of User Groups and a entry field. To add individual users enter
the name in the entry field and click Add. To add groups select the group(s) and
click Add. For our example, let's assume all the MARS developer's are in a MARS
group which you add to the policy. Now all members of this group can access the
resources that are members of the MARS policy.
3 Now do the same for the VENUS directory.
Okay now each group of users has access to the resources which are members of that
policy. If a user is a member of both policies then she has access to the members of
both policies.