Hi Sean, Thank you - I see what you mean. Actually the same is true even within a single instance between multiple security sandboxes.
It's such a shame because ISP's would benefit so enormously from the ability to not allow clients to query a database (i.e. restricting it in their sandbox) - but allowing them to invoke a CFC in another sandbox that could query that database. Certainly you can do this invoking the CFC as a Web Service. But invoking it without having to run up and down the protocol stack would be awfully nice! Thanks for your thoughts on this... -Jason -----Original Message----- From: Sean A Corfield [mailto:[EMAIL PROTECTED] Sent: Sunday, August 03, 2003 1:54 AM To: CF-Talk Subject: Re: CFC Addressing On Saturday, Aug 2, 2003, at 05:59 US/Pacific, Jason Blum wrote: > Does anyone happen to know whether one's calling template and one's > CFCs can reside in separate security sandboxes? For instance, could > an ISP put all client sites in one default security sandbox with few > permissions/tags/etc, but then allow them to tie into CFCs in another > sandbox that does have all permissions. This would make security, > availability and code reuse realitic goals! The security system is per instance, i.e., each CFMX instance has its own sandbox security. If you had multiple CFMX (for J2EE) instances on a server, you could define the same shared CFC directory as a custom tag path in each instance and therefore reuse CFCs across multiple instances. However, the security applied would be that for each individual CFMX instance, therefore the same CFCs would be subject to potentially different security rules in each CFMX instance. Sean A Corfield -- http://www.corfield.org/blog/ "If you're not annoying somebody, you're not really alive." -- Margaret Atwood ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. http://www.cfhosting.com Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
