User Guide

Contents ix
Advanced Security Basics.............................................................................................................290
User Directories.....................................................................................................................291
Resources...............................................................................................................................291
Policies ...................................................................................................................................292
Security Contexts...................................................................................................................293
Advanced Security Implementations..........................................................................................294
Securing Applications with User Security...........................................................................294
Securing Resources with RDS Security................................................................................295
Securing Applications with a Security Sandbox .................................................................295
Securing the ColdFusion Administrator..............................................................................296
Creating an Advanced Security Framework ...............................................................................297
Implementation summary ...................................................................................................297
Installing Advanced Security .......................................................................................................298
Setting Up a Security Server.........................................................................................................299
Caching Advanced Security Information....................................................................................300
Defining User Directories ............................................................................................................301
Defining a Security Context .........................................................................................................304
Specifying Resources to Protect...................................................................................................305
Implementing ColdFusion RDS Security....................................................................................307
Implementing User Security........................................................................................................308
Implementing Server Sandbox Security .....................................................................................308
Securing the ColdFusion Administrator .....................................................................................310
Viewing a Map of your Security Framework...............................................................................311
An Example of ColdFusion Studio Security................................................................................311
Enabling Advanced Security.................................................................................................312
Specifying a User Directory..................................................................................................312
Defining a security context...................................................................................................312
Specifying resources to protect............................................................................................313
Adding policies ......................................................................................................................314
Granting access privileges ....................................................................................................314
Assigning users/groups to policies ......................................................................................315
Enable ColdFusion Studio Security .....................................................................................316
Undocumented Tags and Functions...........................................................................................317
Administrative Functions.....................................................................................................318
Administrative Tags ..............................................................................................................318
Index ..............................................................................................................319