User Guide

C HAPTER 17
Chapter 17 Application Security
ColdFusion 4.5 supports several levels of Advanced security. This chapter teaches
you how to deploy user security, which is controlled by the ColdFusion developer
and offers runtime security for ColdFusion applications. It also describes the Remote
Development Services security feature, which authenticates developers accessing
server resources through ColdFusion Studio before giving them access to protected
resources.
For information on setting up security elements or using Administrator-controlled
security features, See Administering ColdFusion Server.
Contents
ColdFusion Security Features ....................................................................... 264
Remote Development Services (RDS) Security............................................ 264
Overview of User Security ............................................................................. 265
Using Advanced Security in Application Pages ........................................... 265
Using the CFAUTHENTICATE tag................................................................. 266
Catching Security Exceptions........................................................................ 268
Authentication and Authorization Functions.............................................. 267
Catching Security Exceptions........................................................................ 268
Using the CFIMPERSONATE Tag .................................................................. 269
Example of User Authentication and Authorization................................... 270