Adding A Sandbox (Enterprise Edition Only); Configuring A Sandbox - MACROMEDIA COLDFUSION MX 61 - CONFIGURING AND ADMINISTERING COLDFUSION MX Manual

Adding a sandbox (Enterprise Edition only)

ColdFusion MX Enterprise Edition lets you define multiple security sandboxes.
To add a sandbox:
Open the Security > Sandbox Security page in the ColdFusion MX Administrator.
1
The Sandbox Security Permissions page appears.
In the Add Security Sandbox box, enter the name of the new sandbox. This name must be either
2
a ColdFusion mapping (defined in the Administrator) or an absolute path.
Select New Sandbox from the drop-down list to create a sandbox based on the default sandbox,
3
or select an existing sandbox to copy its settings to your new sandbox.
Click Add.
4
The new sandbox appears in the list of Defined Directory Permissions.

Configuring a sandbox

Before you begin security sandbox configuration, analyze your application and its usage to
determine the tags, functions, and resources that it requires. You can then configure the sandbox
to enable access to the required resources and disable usage of the appropriate tags and functions.
For example, if the applications in the sandbox do not use the
disable it.
Note: In the Standard Edition, the Root Security Context is the only sandbox. There is no initial list of
defined directory permissions.
To configure a sandbox:
Open the Security > Sandbox Security page (Security > Resource Security in Standard Edition)
1
in the ColdFusion MX Administrator.
(Enterprise Edition only) In the list of Defined Directory Permissions, click the name or Edit
2
icon for the directory.
A screen with several tabs appears. This is the initial screen in Standard Edition. The remaining
steps describe the use of each tab.
To disable a data source, in the left column of the Datasources tab, highlight the data source,
3
and click the right arrow.
By default, ColdFusion pages in this sandbox can access all data sources.
Note: If <<ALL DATASOURCES>> is in the Enabled Datasources column, any data source that you
add when creating this sandbox is enabled. If you move <<ALL DATASOURCES>> to the Disabled
Datasources column, any new data source is disabled.
Click the CFTags tab.
4
To disable tags, in the left column of the CFTags tab, highlight the tags, and click the right
5
arrow.
By default, ColdFusion pages in this sandbox can access all listed tags.
Click the CFFunctions tab.
6
To disable functions, in the left column of the CFFunctions tab, highlight the functions, and
7
click the right arrow.
By default, ColdFusion pages in this sandbox can access all listed functions.
Click the Files/Dirs tab.
8
72 Chapter 5: Administering Security
tag, you can safely
cfregistry