I disagree a little on that. Since if you store the password in the CF admin, every application on the server can access the datasource with the necessary rights. Whereas when you use username and password inside cfquery, at least the different web applications can not access all datasources except if the proper username and password is used. And here also lie the benefits of the attributecollection attribute in CF8 and Railo 2 that allow you to define general username and password for i.e. cfquery tags.
Gert Dave Watts schrieb: >> Thanks for that mate, I know there are bigger security fish >> to fry when working on the same box but unfortunately this >> setup works better for my budget at the moment, give it 6 >> months and I'll have grown out of it. >> > > Deciding whether to store passwords in the CF Administrator vs CFQUERY tags > when you're running the database server on the same machine is like > rearranging deck chairs on the Titanic. I just want you to be aware of that. > > >> I've just created a user in the database with reader/writer >> permissions and the datasource seems to test fine in the >> admin panel, however, It doesn't seem to work with my stored >> procs, I get a permissions error thrown by cf when running my >> code, are there any additional rights I need to grant that user? >> > > You will have to explicitly grant permissions for stored procedures. You > might find this useful: > http://www.sqlservercentral.com/columnists/bkelley/sqlserversecuritythedb_ex > ecutorrole.asp > > Dave Watts, CTO, Fig Leaf Software > http://www.figleaf.com/ > > Fig Leaf Software provides the highest caliber vendor-authorized > instruction at our training centers in Washington DC, Atlanta, > Chicago, Baltimore, Northern Virginia, or on-site at your location. > Visit http://training.figleaf.com/ for more information! > > This email has been processed by SmoothZap - www.smoothwall.net > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Upgrade to Adobe ColdFusion MX7 Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJQ Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:281122 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
