Securing Coldfusion File Resources; Securing Coldfusion Data Sources - MACROMEDIA COLDFUSION 4.5-ADMINISTRING COLDFUSION SERVER Manual

286
1. Password vulnerability. The password can be lost, stolen, or hacked.
2. Access control is generalized, that is, remote developers have access either to all
files and data sources, or none. With Basic security, you can't protect individual
directories and or databases.

Securing ColdFusion file resources

The following table shows how ColdFusion Basic security compares with native OS
options available to you in securing files for remote development.
Securing Files from ColdFusion Studio
Method
LAN-based
FTP-based
RDS-based

Securing ColdFusion data sources

The following table shows how ColdFusion Basic security can be configured to secure
ColdFusion data sources.
Securing Data Sources from ColdFusion Studio
Method
Basic security is
enabled on the
local
workstation.
Basic security is
enabled on the
remote server.
Description
Uses the native file system to
provide access to local and
network drives.
Connects to an FTP server
running on same machine as the
target web server.
Interacts with the remote file
system using RDS on the target
ColdFusion Server.
Description
Data sources are accessed
through RDS on the local
ColdFusion Server.
Data sources are accessed
through RDS on the remote
ColdFusion Server.
Administering ColdFusion Server
Security Model
Access is determined by the
network permissions of user
logged into workstation where
Studio is being run.
Permissions defined using the
native security of the FTP server
software.
Files on the target server can be
secured with the ColdFusion
Studio password.
Security Model
Data sources that are accessible
to the user locally are accessible
through ColdFusion Studio.
Data sources that are accessible
to ColdFusion Server are
accessible remotely via
ColdFusion Studio.