An Example of ColdFusion Studio Security
3
Notice we did not add any of the wildcard rules named ALL_ , which protect all data
sources and files. The policies only have access to the resources explicitly defined in
their member rules. However, the policies have rules, but users still don't have access.
The next step is assigning users and groups to the policies.
Assigning users/groups to policies
The last step in defining security for this example, is to add users and groups to the
policies you created.
To add users and groups to policies:
1
2
3
Okay now each group of users has access to the resources which are members of that
policy. If a user is a member of both policies then she has access to the members of
both policies.
C_R_FILE
C_W_FILE
C_DEVELOPMENT_R_FILE
C_DEVELOPMENT_W_FILE.
Now the MARS policy has access rights to the
c:\development\mars
For VENUS we want to add the following rules:
VENUS_DSN
VENUS_R_DIRECTORY
VENUS_W_DIRECTORY
VENUS_R_FILES
VENUS_W_FILES
C_R_FILE
C_W_FILE
C_DEVELOPMENT_R_FILE
C_DEVELOPMENT_W_FILE.
Now the VENUS policy has access rights to the
c:\development\venus
From the Policy page select the MARS policy and click the Users button. The
Users page indicates that no users are currently assigned to the policy. If you have
defined multiple user directories, select the directory in the list box that you want
to add users from, and then click the Add/Remove button.
Now you see a list of User Groups and a entry field. To add individual users enter
the name in the entry field and click Add. To add groups select the group(s) and
click Add. For our example, let's assume all the MARS developer's are in a MARS
group which you add to the policy. Now all members of this group can access the
resources that are members of the MARS policy.
Now do the same for the VENUS directory.
directory and sub directories.
directory and sub directories.
and all files in the
mars_dsn
and all files in the
venus_dsn
107
Need help?
Do you have a question about the COLDFUSION 5-ADVANCED ADMINISTRATION and is the answer not in the manual?