Table of Contents
Advertisement
DEVELOPING COLDFUSION 9 APPLICATIONS
Developing CFML Applications
The following image shows this flow of control. For simplicity, it omits the log-out option.
In Application.cfc
(or Application.cfm)
and related files
Form posts to
Step 3
originally
requested
page.
Display
User submits
login
form.
form.
In requested page
User is valid but
not authorized; do
not do secured
operations.
Implementing user security
You can implement security in the following ways.
User requests a
page.
Applicaton.cfc or
Application .cfm runs
first.
Is a user
logged in?
No
In cflogin tag
Step 2
Has the user
No
submitted a login ID
and password?
Yes
Step 4
Use ID and password to
request user's roles from
login database.
Is the user
No
valid?
Yes
Use cfloginuser to log in the
user and identify roles.
IsUserInRole
function
Is user in role
needed for activity?
User is valid and
authorized ; do
secured
operations .
Last updated 8/5/2010
Step 1
Yes
Step 5
351
Advertisement
Table of Contents
