Thanks. So, if we did get Enterprise, what would be necessary. Would I use the db security (Oracle/SQL Server/Access) or something else?
Pat
-----Original Message-----
From: Dave Watts [mailto:[EMAIL PROTECTED]
Sent: Wednesday, April 07, 2004 10:38 AM
To: CF-Talk
Subject: RE: dreamweaver mx/cfmx 6.1 rds - OT
> I am using Dreamweaver mx and CFMX 6.1 professional and
> would like to use RDS support. This would only be used on our
> dev boxes. We have lots of curators and databases. We would
> like to sandbox these databases so that a given curator can
> only see his/her tables/views in all of their databases.
> Because the data is sensitive, we don't want everyone seeing
> this data. I hope this explains our situation. I have been
> told by others this is not possible. Any help would be
> appreciated.
Unfortunately, I doubt that you'll be able to do exactly what you want.
Within CFMX 6.1, you only have one RDS password, which you'd have to give to
all your RDS-enabled curators. This password would allow anyone with RDS
access to browse all of the databases that CFMX has been configured to use,
and edit any of the CFM files on the CF server's filesystem, assuming the
default filesystem ACLs have not been changed.
You could avoid placing usernames and passwords in your CFMX datasources,
which would prevent people from browsing them through RDS, but I'm not sure
whether RDS will then give you a database login prompt to allow you to enter
that information then. Even if it does, you'd then have to pass USERNAME and
PASSWORD attributes within each CFQUERY tag, and one RDS user could simply
read the files of another user to find out the username and password. This
might be sufficient for your needs, but obviously it isn't a guarantee of
security.
You might instead consider setting up separate instances of CFMX, which
unfortunately would require that you purchase Enterprise edition. This would
allow you to isolate each curator.
Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
phone: 202-797-5496
fax: 202-797-5444
_____
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]
