Kevin Schmidt posted this in response to a blog entry on Ray Camden's blog:
you only need to set access=remote if you are using flex with web services. If you are usimg AMF (Flash Remoting) you don't need to set access=remote. See: http://ray.camdenfamily.com/index.cfm/2006/11/24/Next-build-of-my-Flex-2ColdFusion-Security-Homework#more and check the comments It makes sense since both the Flex app and the CFC are on the same host, just like the CFM file and the CFC are on the same host.
