FYI: Fusebox 3.0 spec is out now (the Fusebox book mentioned below was 1.0)
You can read more about here: http://www.fusebox.org/index.cfm?fuseaction=specs.fusebox30 IMO, start using FB3 today! Joseph DeVore VeloxWeb Technologies -----Original Message----- From: Brunt, Michael [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 01, 2001 9:39 AM To: CF-Talk Subject: RE: Goodbye Advanced Security, hello Session Params and eh.. hell o list! Fusebox has what I believe is a really good way to manage Users-Groups-Content Access/Control, it actually works and you can use any SQL or LDAP User-Group structure as the base (yes including MS Access). I recommend getting hold of a great book on Fusebox called "Fusebox Methodology and Techniques" you can get this is either printed and .pdf format. http://www.fusebox.org is another great source and the specific fusebox files that enable Users-Groups-Content Access/Control are typically called app_login.cfm and app_secure.cfm. Mike Brunt Sempra Energy 213.244.5226 "I have NOT lost my mind - I have it backed up on tape somewhere." -----Original Message----- From: Tage Widsell [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 01, 2001 7:17 AM To: CF-Talk Subject: Re: Goodbye Advanced Security, hello Session Params and eh.. hello list! on 01-11-01 16.10, Jochem van Dieten at [EMAIL PROTECTED] wrote: > Tage Widsell wrote: > >> Hi, >> >> After weeks of struggling to get Advanced Security to run with Access in >> ColdFusion 5, i have given up. It works like a charm in CF 4.0.1, but not >> with the new version. Allaire, sorry, Macromedia support have suggested that >> Advanced Security in CF 5 simply doesn't work with Access. > > > It even says so in the manual. > Ok. Support just told me the same thing. I feel stupid now. > >> Time to create a customized session handling and security system to use our >> MySQL server instead. My plan is to use session variables to keep track of >> what users are allowed where, but I seem to recall a few concerns about >> relying on session variables for this from my last time on the list about a >> year ago. Is there something that I should keep in mind while doing this? > > > What exactly are your security needs? Obviously sandboxing can't be > handled with session variables. What scenario would be your worst nightmare? > We don't use sandboxing. I need a role based log-in system that enables me to control what information goes where. We have groups like allUsers, RegisteredUser, betaTesters, admins and registered owners of our products. Apart from the basic server security that wouldn't be handled by this system - to stop people from breaking into the server and modify/damage data, the nightmare would be if someone could find a way to pose as a site admin and get access to product registration, serial numbers etc. > >> Also, one of the problems I had in 4.0.1 was locking the shared scope >> variables. This seems to be much more efficient in CF 5, but I also found >> the option to run Single Threaded Sessions. This seems like a very easy >> solution. Would this affect performance a lot? > > > Yes. > So I would be stupid not to set <cflock> around every shared variable? Ouch. /Tage ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Get the mailserver that powers this list at http://www.coolfusion.com FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/[email protected]/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
