Default behaviour for non existant obs/policies will be true for
IsAuthorized.
As for your userobject, display, try IsProtected() on it and see if it's
returning true.
=======================================================================
Raymond Camden, Principal Spectra Compliance Engineer for Allaire
Email : [EMAIL PROTECTED]
ICQ UIN : 3679482
"My ally is the Force, and a powerful ally it is." - Yoda
> -----Original Message-----
> From: Thomas Chiverton [mailto:[EMAIL PROTECTED]]
> Sent: Monday, February 05, 2001 11:14 AM
> To: CF-Talk
> Subject: Problems with IsAuthorized
>
>
> Attached is a gif that hopefully explains the policy I have in place, a
> userobject called display, that only has me listed, and I have no execute
> permission for (ie, there are no Resource Rules for the policy 'Default',
> the only policy in the PS_Private context, which only has enable for
> resource types:user object ticked)
>
> I'm using a Application.cfm to do auth. against our NT domain, which works
> fine, but when I try to use:
> <cfoutput>
> Auth1: #IsAuthenticated()#
> Auth2: <cfif
> IsAuthorized("UserObject","display","execute")>YES<cfelse>NO</cfif>
> </cfoutput>
> I always get the result "Auth1: Yes Auth2: Yes", even if I change
> display to
> 'sadfasfaf' and execute to 'werqwrq', which is not the behaviour
> I expect -
> surly for non existant objects it should give 'NO', and anyways, I'm not
> authorised to execute that object, so it should be 'NO' in any case ?
>
> Its CF 4.5.1 on NT/IIS
>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
