Using Advanced Security In Application Pages - MACROMEDIA COLDFUSION 5-DEVELOPING Develop Manual

358

Using Advanced Security in Application Pages

Advanced Security makes it easier for developers to enforce application security.
After your administrator sets up the appropriate security contexts for your
application, you can start using ColdFusion security tags and functions to
authenticate users and see whether they are authorized for the part of the
application they are trying to access.
This section describes how to use security tags and functions to authenticate users
and provide or withhold resources according to the security context's rules.
Read the section "Example of User Authentication and Authorization" on page 363 to
see code examples that show how these tags and functions work in ColdFusion
applications.
To learn about syntax and usage for the
and the
Encrypting application pages
For an added measure of security, you can encrypt strings in your applications using
the
CFML Reference.
Include
cfauthenticate
authenticate users; that is, to ensure that users are who they say they are. You
typically use
cfauthenticate
authentication information to subsequent pages on which you want to test for
authentication.
ColdFusion sets a cookie,
choose not to use this cookie, you must check authentication for each request.
Use the
IsAuthenticated
Use the
IsAuthorized
resources. This function lets developers offer or deny access to protected
resources based on a user's authorization level, which is determined by already
established security contexts.
Use the
cfimpersonate
than is otherwise assigned to a particular user.
IsAuthenticated
and
Encrypt Decrypt
on any application page where you want to
in your application's Application.cfm file. Pass the
, to contain authentication information. If you
cfauth
function to check if the current user is authenticated.
function to check whether the user is authorized to access
tag wherever you want to provide a greater level of access
cfauthenticate
and functions, see the CFML Reference.
IsAuthorized
functions. For descriptions of these functions, see the
Chapter 19 Application Security
and
cfimpersonate
tags,