MACROMEDIA COLDFUSION 5-ADVANCED ADMINISTRATION, Руководство пользователя

Страница: 98 / 372

80 Chapter 5 Configuring Advanced Security
What is Advanced Security?
ColdFusion Server Professional and Enterprise editions include Advanced security
features that provide scalable, granular security for building and deploying your
ColdFusion applications:
•
Application development Control access to files, data sources and
administration for each developer on your team. Coordinate team development
on shared servers with the assurance that sensitive data and applications are
secure.
•
Application deployment Create complex rules to programmatically control
access to functionality within applications. Confine applications to secure areas
that can flexibly restrict the access applications have to directories, components,
databases or other resources on the server.
•
Administration Secure the ColdFusion Server Administrator against
unauthorized access and grant various levels of administrative access to specified
users.
It is important to remember that unlike Basic security, which automatically
password-protects your resources, Advanced security provides a self-enforced
security framework that must be explicitly enforced by developers in the applications
they write. (In the Enterprise version of ColdFusion, Advanced security does provide
for security sandboxes, which automatically protect the resources they contain.)
Note
If you have not already read Chapter 3, “ColdFusion Security” on page 59 ," take a few
minutes now to do so. This chapter discusses the differences between Basic and
Advanced security and helps you decide which type of security is best for your
ColdFusion environment.