Adobe 38043740 - ColdFusion Standard - Mac Development Manual page 615

DEVELOPING COLDFUSION 9 APPLICATIONS
Flex and AIR Integration in ColdFusion
Feature
service adapters
security
Description
By default, the PageableResultSetAdapter, the ColdFusionAdapter, the CFCAdapter (for
ColdFusion components), and the CFSSASAdapter (for server-side ActionScript)
adapters are enabled in ColdFusion.
You can also enable the JavaBeanAdapter, JavaAdapter, EJBAdapter, ServletAdapter,
and CFWSAdapter (for web services) by removing their enclosing comment symbols (<!-
- and -->). The following service adapter tags are defined as the default tag values:
<service-adapters>
<adapter>flashgateway.adapter.resultset.PageableResultSetAdapter
</adapter>
<adapter>coldfusion.flash.adapter.ColdFusionAdapter</adapter>
<adapter>coldfusion.flash.adapter.CFCAdapter</adapter>
<adapter>coldfusion.flash.adapter.CFSSASAdapter</adapter>
<!-- <adapter type="stateful-
class">flashgateway.adapter.java.JavaBeanAdapter</adapter> -->
<!-- <adapter type="stateless-
class">flashgateway.adapter.java.JavaAdapter</adapter> -->
<!-- <adapter
type="ejb">flashgateway.adapter.java.EJBAdapter</adapter> -->
<!-- <adapter
type="servlet">flashgateway.adapter.java.ServletAdapter</adapter
> -->
<!-- <adapter>coldfusion.flash.adapter.CFWSAdapter</adapter> -
->
</service-adapters>
You can edit security settings in child tags of the
In the <login-command> tag, you can set the
flashgateway.security.LoginCommand
authentication on a specific application server. By default, the <login-command> tag is
set to the following values:
<login-command>
<class>flashgateway.security.JRunLoginCommand</class>
<server-match>JRun</server-match>
</login-command>
In the tag, you can enable stack traces. Stack traces are useful
<show-stacktraces>
for debugging and product support, but they should not be sent to the client in
production mode because they can expose internal information about the system. The
following
<show-stacktraces>
<show-stacktraces>false</show-stacktraces>
The <whitelist> tag specifies which remote sources can be accessed through the
gateway. The * character can be used as a wildcard to imply ALL matches. The following
<whitelist> tag shows the default value:
<whitelist>
<source>*</source>
</whitelist>
When you deploy your application, ensure that you change this setting so that it
specifies only the services that the gateway needs to access to run your application.
Remember that for ColdFusion based services, directories are treated as "packages" and
thus you specify a period delimited path from the web root to the directory or file
containing the services you will allow access to. An asterisk wildcard allows access to all
services in a particular directory. You can have multiple <source> tags.
The following whitelist allows access to the webroot/cfdocs/exampleapps/ directory,
which includes the flash1 through flash5 Flash Remoting example directories. It also
allows access to a webroot/BigApp/remoting directory and its children.
<whitelist>
<source>cfdocs.exampleapps.*</source>
<source>BigApp.remoting.*</source>
</whitelist>
Last updated 1/20/2012
<security> tag.
implementation for performing local
tag is the default tag:
610