Specifying Resources To Protect - MACROMEDIA COLDFUSION 4.5-ADMINISTRING COLDFUSION SERVER Manual

Chapter 10: Configuring Advanced Security
To define a security context:
1. Open the Advanced Server Security page and click the Security Contexts button.
2. Enter a security context name and click Add.
This is a logical name that defines the scope of the security domain. Later, in your
application pages, developers use this name in the CFAUTHENTICATE tag.
3. In the New Security Context page, add a description of the security context.
4. Choose the Resource Types this context governs.
Avoid selecting ColdFusion resources that you do not intend to secure with this
context, since doing so can needlessly affect performance.
The Add Existing User Directories box is checked by default to let you add users to
this context automatically.
5. Click Add.
The security context is registered. Next, you define the resources and policies for
this context.

Specifying Resources to Protect

When you define a security context, you specify the types of resources to protect, for
example, files and directories. Now you must specify exactly which resources and
which actions to protect. For example, you might limit write access to files at a specific
pathname.
Once you've defined resources, you define a security policy that matches resources to
users and groups. You grant access to a protected resource by adding both rules and
users to a policy. The users and user groups you add to a policy (you can think of them
as policy holders) are authorized to use the resources protected by the security context .
Note
ColdFusion 4.5 introduces a new Resources View in Advanced security.
This view provides and easy-to-use, graphical way to specify resources
you want to protect and add them to policies. Once you've specified user
directories and created security contexts, you can configure all Advanced
security settings in the new Resource View.
305