Re: How secure is RDS

2011-03-02 Thread Russ Michaels
Dreamweaver aso needs RDS for a lot of its features, but RDS is not supposedly to be installe don production servers. If you run CF enterprise, then you can sandbox RDS access and give each user their own login and limit what folders they have access to. This is what I do on cfmldeveloper.com to a

Re: How secure is RDS

2011-03-02 Thread Dave Watts
> Way back in the day I was told RDS was horribly insecure and I wrote it > off and never looked back. Neither RDS nor the CF Administrator should be exposed to untrusted clients. They're both password protected with no auditing of failed authentication events. Dave Watts, CTO, Fig Leaf Software

Re: How secure is RDS

2011-03-02 Thread Dave Watts
> Now I did mention that Flex says it REQUIRES RDS to be enabled in order > to use Flex data services. This is only required to use the wizards in Flash Builder, just like you need RDS to do things in CF Builder. Once your code is written, you can deploy it to servers without RDS enabled. Dave W

Re: How secure is RDS

2011-02-28 Thread Nicholas Tunney
Most of my apps use multiple clients. I many times have a serviceProxy and remotingProxy. At a real basic level the remotingProxy mirrors whatever I need in the serviceProxy as remote methods. The service layer can be RESTful (put/get/post/delete), as Andrew suggested, or can be regular methods

RE: How secure is RDS

2011-02-28 Thread Andrew Scott
[mailto:br...@electricedgesystems.com] > Sent: Tuesday, 1 March 2011 12:50 PM > To: cf-talk > Subject: Re: How secure is RDS > > > and it was the "accessor" stuff that lost me ;-) > > In simple terms are you talking about a single CFC that all other CFC cal

Re: How secure is RDS

2011-02-28 Thread Bryan Stevenson
and it was the "accessor" stuff that lost me ;-) In simple terms are you talking about a single CFC that all other CFC calls pass-through? I've heard that called a "facade", but whatever you call it, it is a way of not requiring all CFCs to be of accessType remote when using AJAX_CFC for exa

Re: How secure is RDS

2011-02-28 Thread Nicholas Tunney
The article is about CF 9 ORM, but the pattern remains the same. The ORM methods are generated in cf9, but in CF8 your objects would probably still have the same accessor methods. Nic On 2/28/11 8:01 PM, "Bryan Stevenson" wrote: > >Oopsone last thing for now I think Nic > >The article

Re: How secure is RDS

2011-02-28 Thread Bryan Stevenson
Oopsone last thing for now I think Nic The article seems to perhaps be more about CF 9 and ORM than Flex and CFis that a safe assumption? I'm asking because I'm stuck on CF 8 for the time being and hoping to avoid confusion between what I'm trying to do and what CF 9 can do ;-) Chee

Re: How secure is RDS

2011-02-28 Thread Bryan Stevenson
un...@nictunney.com wrote: > > > >> I'll check the link when I am home, but I use flash remoting all the > >>time which uses blaze ds under the hood. You should never install rds > >>in production. > >> > >> Sent from my Verizon Wireless Phon

Re: How secure is RDS

2011-02-28 Thread Nicholas Tunney
Verizon Wireless Phone >> >> - Reply message - >> From: "Andrew Scott" >> Date: Mon, Feb 28, 2011 7:08 pm >> Subject: How secure is RDS >> To: "cf-talk" >> >> >> I don't see any where that it mention

Re: How secure is RDS

2011-02-28 Thread Nicholas Tunney
impression the >Flash Remoting on ColdFusion is the way Flash talks to ColdFusion, however >in development the Flash Builder might require RDS to do Flash >development. > >Regards, >Andrew Scott >http://www.andyscott.id.au/ > > >> -Original Message----- >>

Re: How secure is RDS

2011-02-28 Thread Bryan Stevenson
der the hood. You should never install rds in > production. > > Sent from my Verizon Wireless Phone > > - Reply message - > From: "Andrew Scott" > Date: Mon, Feb 28, 2011 7:08 pm > Subject: How secure is RDS > To: "cf-talk" > > > I

Re: How secure is RDS

2011-02-28 Thread nic.tun...@nictunney.com
development the Flash Builder might require RDS to do Flash development. Regards, Andrew Scott http://www.andyscott.id.au/ > -Original Message- > From: Bryan Stevenson [mailto:br...@electricedgesystems.com] > Sent: Tuesday, 1 March 2011 11:03 AM > To: cf-talk > Subj

Re: How secure is RDS

2011-02-28 Thread Casey Dougall
On Mon, Feb 28, 2011 at 7:02 PM, Bryan Stevenson < br...@electricedgesystems.com> wrote: > > OK then Nic/Mark > > > http://www.adobe.com/devnet/flex/articles/fcf_ataglance_flex_coldfusion.html > > Seems to contradict you guys > > I'd love a non-webservice and non-RDS enabled solution, but

RE: How secure is RDS

2011-02-28 Thread Andrew Scott
e RDS to do Flash development. Regards, Andrew Scott http://www.andyscott.id.au/ > -Original Message- > From: Bryan Stevenson [mailto:br...@electricedgesystems.com] > Sent: Tuesday, 1 March 2011 11:03 AM > To: cf-talk > Subject: Re: How secure is RDS > >

Re: How secure is RDS

2011-02-28 Thread Bryan Stevenson
rovide the method of using CFCs in Flex that works > for you? > > Thanks in advance > > Cheers > > On Mon, 2011-02-28 at 18:42 -0500, nic.tun...@nictunney.com wrote: > > > It doesn't. > > > > Nic > > > > Sent from my Verizon Wireless Phon

Re: How secure is RDS

2011-02-28 Thread Bryan Stevenson
unney.com wrote: > It doesn't. > > Nic > > Sent from my Verizon Wireless Phone > > - Reply message - > From: "Mark Mandel" > Date: Mon, Feb 28, 2011 6:27 pm > Subject: How secure is RDS > To: "cf-talk" > > > I'm

Re: How secure is RDS

2011-02-28 Thread nic.tun...@nictunney.com
It doesn't. Nic Sent from my Verizon Wireless Phone - Reply message - From: "Mark Mandel" Date: Mon, Feb 28, 2011 6:27 pm Subject: How secure is RDS To: "cf-talk" I'm no Flex guru by any stretch, but I've never heard this one before (and find it

Re: How secure is RDS

2011-02-28 Thread Mark Mandel
I'm no Flex guru by any stretch, but I've never heard this one before (and find it kinda hard to believe?) Can anyone who has more Flex experience confirm this? Mark On Tue, Mar 1, 2011 at 7:25 AM, Bryan Stevenson < br...@electricedgesystems.com> wrote: > Now I did mention that Flex says it RE

RE: How secure is RDS

2011-02-28 Thread Bryan Stevenson
roduction boxes, nope, don't. > > --- Ben > > > > -Original Message- > From: Bryan Stevenson [mailto:br...@electricedgesystems.com] > Sent: Sunday, February 27, 2011 2:07 PM > To: cf-talk > Subject: How secure is RDS > > > let's t

RE: How secure is RDS

2011-02-28 Thread Ben Forta
erally not necessary and therefore should not be running. Now on a development box, sure, go ahead, but on production boxes, nope, don't. --- Ben -Original Message- From: Bryan Stevenson [mailto:br...@electricedgesystems.com] Sent: Sunday, February 27, 2011 2:07 PM To: cf-talk Subj

Re: How secure is RDS

2011-02-28 Thread Matt Quackenbush
RDS in production is still a no-no. :-) ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/messag

How secure is RDS

2011-02-28 Thread Bryan Stevenson
let's try that again... ;-) Hi All, Way back in the day I was told RDS was horribly insecure and I wrote it off and never looked back. Well now I'm into Flex and it uses RDS in order to use CF data services (or I can use webservices). So how safe is having RDS enabled? Any good tutorials on s