My main concern is <CFFILE>. If no one had ftp access to the server, it wouldn't be a big deal, but unfortunately there are multiple accounts.
Sarah ----- Original Message ----- From: Michels, Matt <[EMAIL PROTECTED]> To: CF-Server <[EMAIL PROTECTED]> Sent: Friday, November 02, 2001 2:47 PM Subject: RE: Security | One caveat, if you disable the <CFREGISTRY> tag the ColdFusion Administrator | will break. | | Matt | | -----Original Message----- | From: Jochem van Dieten [mailto:[EMAIL PROTECTED]] | Sent: Friday, November 02, 2001 3:43 PM | To: CF-Server | Subject: Re: Security | | | Sarah Skiba wrote: | > From: Jochem van Dieten <[EMAIL PROTECTED]> | > | Herman Cremer wrote: | > | | > | > Hi | > | > | > | > Just a quick question. | > | > I know one can disable / enable the follwing tags in CF-Server admin. | > | > | > | > CFCONTENT tag | > | > CFDIRECTORY tag | > | > CFFILE tag | > | > CFOBJECT tag | > | > CFREGISTRY tag | > | > CFADMINSECURITY tag | > | > CFEXECUTE tag | > | > | > | > Is it possible to allow some sites to use the tags, and deny it to | > others ? | > | | > | | > | Sure. It requires Sandbox security (which is an Enterprise feature) and | > | a lot of work. Or just put everything you want to be able to use these | > | tags below the unsecured tags directory. | > | | > "Or just put everything you want to be able to use these tags below the | > unsecured tags directory." | > | > How would you go about that, (if running CF Server 4.1 Pro version)? | | | Drag your sites there and change the unsecured tags directory to get a | directory structure like: | | d: | --docroot | --trusted | --siteA | --siteC | --untrusted | --siteB | | In this case the unsecured tags directory would be d:\docroot\trusted\ | | Jochem | | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Your ad could be here. Monies from ads go to support these lists and provide more resources for the community. http://www.fusionauthority.com/ads.cfm ------------------------------------------------------------------------------ To unsubscribe, send a message to [EMAIL PROTECTED] with 'unsubscribe' in the body or visit the list page at www.houseoffusion.com
