> Ok I've been using cf for awhile and have been asked > about the process- how it sends info to/from db, etc. > I explained it and to illustrate showed diagrams from > Forta's and Wrox's books on How ColdFusion Works- (client > request--webserver passes to cf--cf processes all cfml > tags--cf returns html to web server). That wasn't good > enough- they want to know the exact process, all the > files that are used- what permissions are needed on > files/directories of each server (web/cf/sql), etc as > the pages are being processed, any and all services used, > any temporary files made. So I'm now trying to explain > exactly how a login works however, I haven't been able to > give the detail that's requested- I guess I just know > the generic part that cfquery passes to sql by way of > datasource- etc but don't know if it leaves any temp > files,etc. (And I haven't been able to find it)
To the best of my knowledge, CF doesn't create any temporary files except when accepting uploaded files. As for permissions, those may vary depending on the operating system and web server used, and the way CF integrates with that web server. You might find this permissions discussion, which covers NT, IIS 4, and CF 4.x, useful: http://www.defusion.com/articles/index.cfm?ArticleID=89 In general, the web server (or in the case of IIS, which does impersonation, the IIS anonymous user account or a specific impersonated user account - a logged-in user) will need read/execute rights on CF scripts (.cfm, .dbm), and the CF server, which by default on Windows runs as SYSTEM, will need execute rights on those same scripts. On Windows, with IIS, you can actually tighten this a bit - users only need execute rights, and CF only needs read rights. The CF server account will need read/execute permissions on the appropriate binaries in the \CFUSION directory, and read/write permissions on the appropriate registry keys. The CF server will need execute permissions on database client binaries. The only services involved here are the web server and the CF Application Server. SQL databases, such as SQL Server and Oracle, have their own methods for handling permissions. Typically, you'd need to create a user within the database, assign that user the appropriate rights, and use the username and password for that user within your CF datasource or application. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ voice: (202) 797-5496 fax: (202) 797-5444 ______________________________________________________________________ Dedicated Windows 2000 Server PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER Instant Activation � $99/Month � Free Setup http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
