To CF list

Greetings, 

I develop an intranet application where users should be authenticated and 
authorized to have an access to specific resources.  I would like to use
Advanced Security features to implement it. SiteMinder services were
installed.
They are running. I used an MS Access 2000 database file as an user
directory  
[ ODBC source: to store information about users, groups]. I also modified
file 
"SmDsQuery.ini" to reflect db structure.  All users belong to different
groups: admins, editors, groupA, groupB, etc.

Here are questions:

1. How can I authorize groups of users for access to specific directory,
say /admin/editors/. What type of "resource" should it be? [file?]
As when I try to create rules and policy I have only option to add
user, not a GROUP. Is it problem with settings in SmDsQuery.ini?

2. The authentication works fine. What is a way to implement logout
function? The matter in   
   that I use session variable to check if a user logged in. As I
understood auth. functions
   uses cookies to do it. How I can "clean" this settings for userA ?

Thank you in advanced. Any suggestions are strongly welcome. 

I work with:

Server Product ColdFusion Server 
Version 4.5.1.0 
Edition Professional 
Operating System Windows NT 
OS Version 4.0, Service Pack 6 



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm
------------------------------------------------------------------------------
To unsubscribe, send a message to [EMAIL PROTECTED] with 
'unsubscribe' in the body or visit the list page at www.houseoffusion.com

Reply via email to