[cfaussie] Re: CFLOGIN

[Scott Barnes]

Doesn't the CFLOGIN tag just set an encoded cookie? In that if you attach other variables to the CFLOGIN scope, it may not encode them as it only expects a pre-defined value set.   Well, I personally have a "person" object instatiated into the session scoep, when a user hits my applications. When the initialization of the person object begins, it fires a method to check for isLoggedIn(), which depending on your security model does a check for the correct security creditentials (ie cookies etc).   If it comes back as rejected, the person.isLoggedIn() is "false" which you then do your login procedure etc etc..   When I use CFLOGIN, I generally also keep the roles a user belongs to in an array, as a property of the User. Its mainly for things that CFLOGIN can't have control over and for times when you need to get what roles a user belongs to (you could just db lookup that user, but while your in the DB in the first place and doing a handshake, it can't hurt to store the details in the person object).   I've found using a Person object opens up lots of doors, for scaleability accross multiple applications in that you could say have two shopping carts per person for two sites and all refer to the one user? and then when you need to log any movements its as simple as person.logThisPage(true); when you want to dump the users movements through an application.   Scott.         Is it possible to add items to the CFLOGIN structure?   I have tried this......... <cflogin>       <cfloginuser name="#checkUser.Username#" password="" roles="All">       <cfset CFLOGIN.UserID = checkUser.UserID>       <cfset getAllowedModules = request.adminModules.getAllowed(UserID="#checkUser.UserID#")>       <cfset CFLOGIN.AdminModules = ValueList(getAllowedModules.AdminModuleID)> </cflogin>   But the values dont exists in the CFLOGIN scope   If not, how are you guys handling your login environment?  Just via the session scope? Regards Steve Onnis Domain Concept Designs +61 422 337 685 +61 3 9431 4249 http://www.domainconceptdesigns.com [EMAIL PROTECTED] http://www.cfcentral.com.au [EMAIL PROTECTED] ("If you think it can't be done, you haven't asked me!") - Steve Onnis --- You are currently subscribed to cfaussie as: [EMAIL PROTECTED] To unsubscribe send a blank email to [EMAIL PROTECTED] MX Downunder AsiaPac DevCon - http://mxdu.com/