I've downloaded the files and docs, and it looks good, but I'm getting
errors. I'm still running CFStudio 4.01 on my development machine and it's
choking on the URL struct call. I can call specific URL variables (e.g.
#URL.FuseAction#) but the line

for(key in url){

in the file FBX_FUSEBOX30_CF40.CFM is generating an "Error resolving
parameter URL" message. I get the same message when I try to access the URL
struct this way in other files.

Is there a possibility that the wrong file got swapped in for
FBX_FUSEBOX30_CF40.CFM? In the FuseDocs in that file it says it's
FBX_FUSEBOX30_CF50.CFM...

Or is there some problem with my development server's installation or
settings?

Thanks - Eric

-----Original Message-----
From: Joseph DeVore [mailto:[EMAIL PROTECTED]]
Sent: Thursday, November 01, 2001 11:10 AM
To: CF-Talk
Subject: RE: Goodbye Advanced Security, hello Session Params and eh..
hell o list!


FYI: Fusebox 3.0 spec is out now (the Fusebox book mentioned below was 1.0)

You can read more about here:
http://www.fusebox.org/index.cfm?fuseaction=specs.fusebox30

IMO, start using FB3 today!


Joseph DeVore
VeloxWeb Technologies




-----Original Message-----
From: Brunt, Michael [mailto:[EMAIL PROTECTED]]
Sent: Thursday, November 01, 2001 9:39 AM
To: CF-Talk
Subject: RE: Goodbye Advanced Security, hello Session Params and eh..
hell o list!


Fusebox has what I believe is a really good way to manage
Users-Groups-Content Access/Control, it actually works and you can use any
SQL or LDAP User-Group structure as the base (yes including MS Access). I
recommend getting hold of a great book on Fusebox called "Fusebox
Methodology and Techniques" you can get this is either printed and .pdf
format.  http://www.fusebox.org is another great source and the specific
fusebox files that enable Users-Groups-Content Access/Control are typically
called app_login.cfm and app_secure.cfm.

Mike Brunt
Sempra Energy
213.244.5226

"I have NOT lost my mind - I have it backed up on tape somewhere."


-----Original Message-----
From: Tage Widsell [mailto:[EMAIL PROTECTED]]
Sent: Thursday, November 01, 2001 7:17 AM
To: CF-Talk
Subject: Re: Goodbye Advanced Security, hello Session Params and eh..
hello list!


on 01-11-01 16.10, Jochem van Dieten at [EMAIL PROTECTED] wrote:

> Tage Widsell wrote:
>
>> Hi,
>>
>> After weeks of struggling to get Advanced Security to run with Access in
>> ColdFusion 5, i have given up. It works like a charm in CF 4.0.1, but not
>> with the new version. Allaire, sorry, Macromedia support have suggested
that
>> Advanced Security in CF 5 simply doesn't work with Access.
>
>
> It even says so in the manual.
>

Ok. Support just told me the same thing. I feel stupid now.

>
>> Time to create a customized session handling and security system to use
our
>> MySQL server instead. My plan is to use session variables to keep track
of
>> what users are allowed where, but I seem to recall a few concerns about
>> relying on session variables for this from my last time on the list about
a
>> year ago. Is there something that I should keep in mind while doing this?
>
>
> What exactly are your security needs? Obviously sandboxing can't be
> handled with session variables. What scenario would be your worst
nightmare?
>

We don't use sandboxing. I need a role based log-in system that enables me
to control what information goes where. We have groups like allUsers,
RegisteredUser, betaTesters, admins and registered owners of our products.
Apart from the basic server security that wouldn't be handled by this system
- to stop people from breaking into the server and modify/damage data, the
nightmare would be if someone could find a way to pose as a site admin and
get access to product registration, serial numbers etc.



>
>> Also, one of the problems I had in 4.0.1 was locking the shared scope
>> variables. This seems to be much more efficient in CF 5, but I also found
>> the option to run Single Threaded Sessions. This seems like a very easy
>> solution. Would this affect performance a lot?
>
>
> Yes.
>

So I would be stupid not to set <cflock> around every shared variable? Ouch.

/Tage




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to