Implementing Server Sandbox Security - MACROMEDIA COLDFUSION 5-ADVANCED ADMINISTRATION Manual

100

Implementing Server Sandbox Security

ColdFusion Server Enterprise edition supports server sandbox security for hosted
sites. This security feature, controlled by the ColdFusion administrator of a hosted
site, offers runtime security based on directory access at a hosted site. See "Securing
applications with a security sandbox" on page 85 to learn about security sandbox
concepts.
Note
If both user security and server sandbox security are enabled, sandbox security takes
precedence.
In order to implement server sandbox security, you must use the ColdFusion
Administrator to:
1
2
3
4
5
6
7
8
9
Set up the security server. See "Setting Up a Security Server" on page 89 for more
information.
Set up user directories to authenticate against an NT domain, an LDAP directory,
or an ODBC data source. See "Defining User Directories" on page 92 for more
information.
Create a security context for the application. See "Defining a Security Context" on
page 95 for more information.
Specify individual resources to protect and set up policies that match secured
resources with authorized users and groups. See "Specifying Resources to
Protect" on page 96 for more information.
On the ColdFusion Administrator's Advanced Server Security page, select the Use
Security Sandbox Settings check box and then click the Security Sandboxes
button at the bottom of the page.
You see the Registered Security Sandboxes page.
In the Security Sandbox box, enter a fully qualified path (using forward slashes)
for the directory whose contents you want to protect.
Select the type of sandbox to create from the Type drop-down:
Choosing Operating System protects OS-level resources based on privileges
assigned through a Windows NT domain.
Choosing Security Context protects ColdFusion resources based on privileges
assigned through a security context.
Click Add.
You see the New Sandbox page, with the path you entered in step 6 already in the
Location box.
Specify a Windows NT Domain or a security context:
If you chose Operating System in step 7, enter the NT Domain to authenticate
against in the NT Domain box.
Chapter 5 Configuring Advanced Security