Re: dreamweaver mx/cfmx 6.1 rds - OT
what db are you using? you can set granular security roles with most enterprise dbs. -Adam > -Original Message- > From: Whittingham, P [mailto:[EMAIL PROTECTED] > Sent: Wednesday, April 7, 2004 01:14 PM > To: 'CF-Talk' > Subject: dreamweaver mx/cfmx 6.1 rds - OT > > Hi All, > > I am using Dreamweaver mx and CFMX 6.1 professional and would like to use RDS support. This would only be used on our dev boxes. We have lots of curators and databases. We would like to sandbox these databases so that a given curator can only see his/her tables/views in all of their databases. Because the data is sensitive, we don't want everyone seeing this data. I hope this explains our situation. I have been told by others this is not possible. Any help would be appreciated. > > TIA, > Patrick Whittingham > United Space Alliance > AES - Data Warehouse > > > _ > > > > [Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]
RE: dreamweaver mx/cfmx 6.1 rds - OT
Using MS Access, MS SQL Server and Oracle 8/8i/9i databases. So your saying, to use the security roles inside the db to control seeing the tables/views/sp? TIA, Patrick Whittingham United Space Alliance AES - Data Warehouse -Original Message- From: Adrocknaphobia [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 07, 2004 9:22 AM To: CF-Talk Subject: Re: dreamweaver mx/cfmx 6.1 rds - OT what db are you using? you can set granular security roles with most enterprise dbs. -Adam > -Original Message- > From: Whittingham, P [mailto:[EMAIL PROTECTED] > Sent: Wednesday, April 7, 2004 01:14 PM > To: 'CF-Talk' > Subject: dreamweaver mx/cfmx 6.1 rds - OT > > Hi All, > > I am using Dreamweaver mx and CFMX 6.1 professional and would like to use RDS support. This would only be used on our dev boxes. We have lots of curators and databases. We would like to sandbox these databases so that a given curator can only see his/her tables/views in all of their databases. Because the data is sensitive, we don't want everyone seeing this data. I hope this explains our situation. I have been told by others this is not possible. Any help would be appreciated. > > TIA, > Patrick Whittingham > United Space Alliance > AES - Data Warehouse > > > _ > > > > _ [Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]
RE: dreamweaver mx/cfmx 6.1 rds - OT
> I am using Dreamweaver mx and CFMX 6.1 professional and > would like to use RDS support. This would only be used on our > dev boxes. We have lots of curators and databases. We would > like to sandbox these databases so that a given curator can > only see his/her tables/views in all of their databases. > Because the data is sensitive, we don't want everyone seeing > this data. I hope this explains our situation. I have been > told by others this is not possible. Any help would be > appreciated. Unfortunately, I doubt that you'll be able to do exactly what you want. Within CFMX 6.1, you only have one RDS password, which you'd have to give to all your RDS-enabled curators. This password would allow anyone with RDS access to browse all of the databases that CFMX has been configured to use, and edit any of the CFM files on the CF server's filesystem, assuming the default filesystem ACLs have not been changed. You could avoid placing usernames and passwords in your CFMX datasources, which would prevent people from browsing them through RDS, but I'm not sure whether RDS will then give you a database login prompt to allow you to enter that information then. Even if it does, you'd then have to pass USERNAME and PASSWORD attributes within each CFQUERY tag, and one RDS user could simply read the files of another user to find out the username and password. This might be sufficient for your needs, but obviously it isn't a guarantee of security. You might instead consider setting up separate instances of CFMX, which unfortunately would require that you purchase Enterprise edition. This would allow you to isolate each curator. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ phone: 202-797-5496 fax: 202-797-5444 [Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]
RE: dreamweaver mx/cfmx 6.1 rds - OT
Dave, Thanks. So, if we did get Enterprise, what would be necessary. Would I use the db security (Oracle/SQL Server/Access) or something else? Pat -Original Message- From: Dave Watts [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 07, 2004 10:38 AM To: CF-Talk Subject: RE: dreamweaver mx/cfmx 6.1 rds - OT > I am using Dreamweaver mx and CFMX 6.1 professional and > would like to use RDS support. This would only be used on our > dev boxes. We have lots of curators and databases. We would > like to sandbox these databases so that a given curator can > only see his/her tables/views in all of their databases. > Because the data is sensitive, we don't want everyone seeing > this data. I hope this explains our situation. I have been > told by others this is not possible. Any help would be > appreciated. Unfortunately, I doubt that you'll be able to do exactly what you want. Within CFMX 6.1, you only have one RDS password, which you'd have to give to all your RDS-enabled curators. This password would allow anyone with RDS access to browse all of the databases that CFMX has been configured to use, and edit any of the CFM files on the CF server's filesystem, assuming the default filesystem ACLs have not been changed. You could avoid placing usernames and passwords in your CFMX datasources, which would prevent people from browsing them through RDS, but I'm not sure whether RDS will then give you a database login prompt to allow you to enter that information then. Even if it does, you'd then have to pass USERNAME and PASSWORD attributes within each CFQUERY tag, and one RDS user could simply read the files of another user to find out the username and password. This might be sufficient for your needs, but obviously it isn't a guarantee of security. You might instead consider setting up separate instances of CFMX, which unfortunately would require that you purchase Enterprise edition. This would allow you to isolate each curator. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ phone: 202-797-5496 fax: 202-797-5444 _ [Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]
RE: dreamweaver mx/cfmx 6.1 rds - OT
> Thanks. So, if we did get Enterprise, what would be > necessary. Would I use the db security (Oracle/SQL > Server/Access) or something else? At that point, you wouldn't need to rely on database security, in the sense that you wouldn't have to use USERNAME and PASSWORD attributes within CFQUERY. Instead, you'd have a different RDS password for each instance, and that instance would only allow connections to the specific databases for that application/user. You would, of course, still create individual logins within your database as appropriate. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ phone: 202-797-5496 fax: 202-797-5444 [Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]