To CF list
Greetings,
I develop an intranet application where users should be authenticated and
authorized to have an access to specific resources. I would like to use
Advanced Security features to implement it. SiteMinder services were
installed.
They are running. I used an MS Access 2000 database file as an user
directory
[ ODBC source: to store information about users, groups]. I also modified
file
"SmDsQuery.ini" to reflect db structure. All users belong to different
groups: admins, editors, groupA, groupB, etc.
Here are questions:
1. How can I authorize groups of users for access to specific directory,
say /admin/editors/. What type of "resource" should it be? [file?]
As when I try to create rules and policy I have only option to add
user, not a GROUP. Is it problem with settings in SmDsQuery.ini?
2. The authentication works fine. What is a way to implement logout
function? The matter in
that I use session variable to check if a user logged in. As I
understood auth. functions
uses cookies to do it. How I can "clean" this settings for userA ?
Thank you in advanced. Any suggestions are strongly welcome.
I work with:
Server Product ColdFusion Server
Version 4.5.1.0
Edition Professional
Operating System Windows NT
OS Version 4.0, Service Pack 6
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
------------------------------------------------------------------------------
To unsubscribe, send a message to [EMAIL PROTECTED] with
'unsubscribe' in the body or visit the list page at www.houseoffusion.com