MACROMEDIA COLFUSION MX 7 - INSTALLING AND USING COLDFUSION..., Руководство пользователя

Страница: 86 / 170

86 Chapter 6: Administering Security
The Security area in the Administrator lets you do the following tasks:
•
Configure password protection for the ColdFusion MX Administrator. For more information,
see
“ColdFusion MX Administrator password protection” on page 86 .
•
Configure password protection for RDS access. For more information, see “RDS password
protection” on page 86 .
•
Enable, disable, and customize ColdFusion security, on the Security > Sandbox Security page
(called Resource Security page in the Standard edition). For more information, see
“Using
sandbox security” on page 86 .
Using password protection
Password protection restricts access to the ColdFusion MX Administrator and to a ColdFusion
server when you attempt access through RDS security.
ColdFusion MX Administrator password protection
Secure access to the ColdFusion MX Administrator is enabled by default. The password that you
enter during installation is saved as the default. You are prompted to enter this password whenever
you open the Administrator.
Password protection for accessing the Administrator helps guard against unauthorized
modifications of ColdFusion MX, and Macromedia highly recommends using passwords. You
can disable or change the Administrator password on the Security > CF Admin Password page.
RDS password protection
If you configured password protection for RDS access when you installed ColdFusion, you are
prompted for the password when you attempt to access ColdFusion MX from Macromedia
Dreamweaver MX 2004, Macromedia H, or the ColdFusion Report Builder.
You can disable RDS or change the RDS password on the Security > RDS Password page.
Note: Disabling RDS also disables the applet that the ColdFusion MX Administrator uses in file-
related dialog boxes.
If you use RDS security, you rely on web server and operating system security settings to set
permissions for ColdFusion application and document directories.
Using sandbox security
Sandbox security (called Resource security in the Standard Edition) uses the location of your
ColdFusion pages to control access to ColdFusion resources. A
sandbox is a designated directory
of your site to which you apply security restrictions. Sandbox security lets you specify which tags,
functions, and resources (for example, files, directories, and data sources) can be used by
ColdFusion pages located in and under the designated directory.