Using Password Protection; Using Sandbox Security - MACROMEDIA COLFUSION MX 7 - CONFIGURING AND ADMINISTERING COLDFUSION MX Manual

The Security area in the Administrator lets you do the following tasks:
•
Configure password protection for the ColdFusion MX Administrator. For more information,
see "ColdFusion MX Administrator password protection" on page
•
Configure password protection for RDS access. For more information, see
protection" on page
•
Enable, disable, and customize ColdFusion security, on the Security > Sandbox Security page
(called Resource Security page in the Standard edition). For more information, see
sandbox security" on page

Using password protection

Password protection restricts access to the ColdFusion MX Administrator and to a ColdFusion
server when you attempt access through RDS security.
ColdFusion MX Administrator password protection
Secure access to the ColdFusion MX Administrator is enabled by default. The password that you
enter during installation is saved as the default. You are prompted to enter this password whenever
you open the Administrator.
Password protection for accessing the Administrator helps guard against unauthorized
modifications of ColdFusion MX, and Macromedia highly recommends using passwords. You
can disable or change the Administrator password on the Security > CF Admin Password page.
RDS password protection
If you configured password protection for RDS access when you installed ColdFusion, you are
prompted for the password when you attempt to access ColdFusion MX from Macromedia
Dreamweaver MX 2004, Macromedia HomeSite+, or the ColdFusion Report Builder.
You can disable RDS or change the RDS password on the Security > RDS Password page.
Note: Disabling RDS also disables the applet that the ColdFusion MX Administrator uses in file-
related dialog boxes.
If you use RDS security, you rely on web server and operating system security settings to set
permissions for ColdFusion application and document directories.

Using sandbox security

Sandbox security (called Resource security in the Standard Edition) uses the location of your
ColdFusion pages to control access to ColdFusion resources. A sandbox is a designated directory
of your site to which you apply security restrictions. Sandbox security lets you specify which tags,
functions, and resources (for example, files, directories, and data sources) can be used by
ColdFusion pages located in and under the designated directory.
86 Chapter 6: Administering Security
86.
86.
86.
"RDS password
"Using