MACROMEDIA COLDFUSION 4.5-ADMINISTRING COLDFUSION..., Руководство пользователя

Страница: 330 / 350

308 Administering ColdFusion Server
Implementing User Security
The user security feature allows ColdFusion developers to authenticate users and
match protected resources with authorized users. See “Securing Applications with
User Security” on page 294 to learn about user security concepts.
In order to implement user security you must use the ColdFusion Administrator to:
1. Set up the security server. See “Setting Up a Security Server” on page 299 for more
information.
2. Set up user directories to authenticate against an NT domain, an LDAP directory,
or an ODBC data source. See “Defining User Directories” on page 301 for more
information.
3. Create a security context for the application. See “Defining a Security Context” on
page 304 for more information.
4. Specify individual resources to protect and set up policies that match secured
resources with authorized users and groups.. See “Specifying Resources to
Protect” on page 305 for more information.
After the security framework is in place, developers use the CFAUTHENTICATE tag in
individual application pages (or the
Application.cfm
file) to authenticate users. The
IsAuthenticated and IsAuthorized functions enable developers to offer or deny access
based on the established security policies. Remember that nothing you configured in
the ColdFusion Administrator takes effect until developers enforce the contexts in
their applications. See the CFML Language Reference for more information on
IsAuthenticated and IsAuthorized.
Implementing Server Sandbox Security
ColdFusion Server Enterprise edition supports server sandbox security for hosted
sites. This security feature, controlled by the ColdFusion administrator of a hosted site,
offers runtime security based on directory access at a hosted site. See “Securing
Applications with a Security Sandbox” on page 295 to learn about security sanbox
concepts.
Note
If both user security and server sandbox security are enabled, sandbox
security takes precedence.
In order to implement server sandbox security, you must use the ColdFusion
Administrator to:
1. Set up the security server. See “Setting Up a Security Server” on page 299 for more
information.
2. Set up user directories to authenticate against an NT domain, an LDAP directory,
or an ODBC data source. See “Defining User Directories” on page 301 for more
information.
3. Create a security context for the application. See “Defining a Security Context” on
page 304 for more information.