Resource Types; Policies - MACROMEDIA COLDFUSION 5-ADVANCED ADMINISTRATION Manual

82

Resource types

A ColdFusion resource type that you want to protect is the core of Advanced security.
Selecting a resource to protect doesn't specify how to protect it or which users can
access it; you're simply telling ColdFusion the name and, if applicable, the action of
the resource you intend to secure. For example, you can control:
Resources are not secured until you specifically choose to protect them. You can
secure the following types of resources:

Policies

After you specify a resource to protect, you need to create a policy that gives a set of
users access rights to that resource. A policy binds resources to users or user groups,
that is, it grants a group of users access to specified resources.
For example, you can create a policy that gives members of a team complete access
to three data sources that the team uses regularly. You could also create a policy that
specifies the system administrator as the only user who can use the
write
If you specify a resource to protect but do not include it in any policy, the resource is
fully protected within the Security Context—in other words, no users have access to
those resources.
Write access to all the files in a specified directory
Which actions of a specified CFML tag are restricted
Inserts and updates for a specific ColdFusion data source
Applications
Verity Collections
Components
ColdFusion Tags
ColdFusion Functions
Custom Tags
Data Sources
Files and Directories
User Objects
Users
action.
Chapter 5 Configuring Advanced Security
tag's
cffile