dreamweaver mx/cfmx 6.1 rds - OT

2004-04-07 Thread Whittingham, P
Hi All,

 
I am using Dreamweaver mx and CFMX 6.1 professional and would like to use RDS support. This would only be used on our dev boxes. We have lots of curators and databases. We would like to sandbox these databases so that a given curator can only see his/her tables/views in all of their databases. Because the data is sensitive, we don't want everyone seeing this data. I hope this explains our situation. I have been told by others this is not possible. Any help would be appreciated.

 
TIA,
Patrick Whittingham
United Space Alliance
AES - Data Warehouse

_
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: dreamweaver mx/cfmx 6.1 rds - OT

2004-04-07 Thread Adrocknaphobia
what db are you using? you can set granular security roles with most enterprise dbs.

-Adam

 -Original Message-
 From: Whittingham, P [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, April 7, 2004 01:14 PM
 To: 'CF-Talk'
 Subject: dreamweaver mx/cfmx 6.1 rds - OT
 
 Hi All,

I am using Dreamweaver mx and CFMX 6.1 professional and would like to use RDS support. This would only be used on our dev boxes. We have lots of curators and databases. We would like to sandbox these databases so that a given curator can only see his/her tables/views in all of their databases. Because the data is sensitive, we don't want everyone seeing this data. I hope this explains our situation. I have been told by others this is not possible. Any help would be appreciated.

 TIA,
 Patrick Whittingham
 United Space Alliance
 AES - Data Warehouse
 
 
_
 
 
 

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: dreamweaver mx/cfmx 6.1 rds - OT

2004-04-07 Thread Whittingham, P
Using MS Access, MS SQL Server and Oracle 8/8i/9i databases. So your saying, to use the security roles inside the db to control seeing the tables/views/sp?

 
TIA,
Patrick Whittingham
United Space Alliance
AES - Data Warehouse

-Original Message-
From: Adrocknaphobia [mailto:[EMAIL PROTECTED]
Sent: Wednesday, April 07, 2004 9:22 AM
To: CF-Talk
Subject: Re: dreamweaver mx/cfmx 6.1 rds - OT

what db are you using? you can set granular security roles with most enterprise dbs.

-Adam

 -Original Message-
 From: Whittingham, P [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, April 7, 2004 01:14 PM
 To: 'CF-Talk'
 Subject: dreamweaver mx/cfmx 6.1 rds - OT
 
 Hi All,

I am using Dreamweaver mx and CFMX 6.1 professional and would like to use RDS support. This would only be used on our dev boxes. We have lots of curators and databases. We would like to sandbox these databases so that a given curator can only see his/her tables/views in all of their databases. Because the data is sensitive, we don't want everyone seeing this data. I hope this explains our situation. I have been told by others this is not possible. Any help would be appreciated.

 TIA,
 Patrick Whittingham
 United Space Alliance
 AES - Data Warehouse
 
 
_
 
 
 
 
_
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: dreamweaver mx/cfmx 6.1 rds - OT

2004-04-07 Thread Dave Watts
I am using Dreamweaver mx and CFMX 6.1 professional and 
 would like to use RDS support. This would only be used on our 
 dev boxes. We have lots of curators and databases. We would 
 like to sandbox these databases so that a given curator can 
 only see his/her tables/views in all of their databases. 
 Because the data is sensitive, we don't want everyone seeing 
 this data. I hope this explains our situation. I have been 
 told by others this is not possible. Any help would be 
 appreciated.

Unfortunately, I doubt that you'll be able to do exactly what you want.
Within CFMX 6.1, you only have one RDS password, which you'd have to give to
all your RDS-enabled curators. This password would allow anyone with RDS
access to browse all of the databases that CFMX has been configured to use,
and edit any of the CFM files on the CF server's filesystem, assuming the
default filesystem ACLs have not been changed.

You could avoid placing usernames and passwords in your CFMX datasources,
which would prevent people from browsing them through RDS, but I'm not sure
whether RDS will then give you a database login prompt to allow you to enter
that information then. Even if it does, you'd then have to pass USERNAME and
PASSWORD attributes within each CFQUERY tag, and one RDS user could simply
read the files of another user to find out the username and password. This
might be sufficient for your needs, but obviously it isn't a guarantee of
security.

You might instead consider setting up separate instances of CFMX, which
unfortunately would require that you purchase Enterprise edition. This would
allow you to isolate each curator.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
phone: 202-797-5496
fax: 202-797-5444
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: dreamweaver mx/cfmx 6.1 rds - OT

2004-04-07 Thread Whittingham, P
Dave,

 
Thanks. So, if we did get Enterprise, what would be necessary. Would I use the db security (Oracle/SQL Server/Access) or something else?

 
Pat

-Original Message-
From: Dave Watts [mailto:[EMAIL PROTECTED]
Sent: Wednesday, April 07, 2004 10:38 AM
To: CF-Talk
Subject: RE: dreamweaver mx/cfmx 6.1 rds - OT

I am using Dreamweaver mx and CFMX 6.1 professional and 
 would like to use RDS support. This would only be used on our 
 dev boxes. We have lots of curators and databases. We would 
 like to sandbox these databases so that a given curator can 
 only see his/her tables/views in all of their databases. 
 Because the data is sensitive, we don't want everyone seeing 
 this data. I hope this explains our situation. I have been 
 told by others this is not possible. Any help would be 
 appreciated.

Unfortunately, I doubt that you'll be able to do exactly what you want.
Within CFMX 6.1, you only have one RDS password, which you'd have to give to
all your RDS-enabled curators. This password would allow anyone with RDS
access to browse all of the databases that CFMX has been configured to use,
and edit any of the CFM files on the CF server's filesystem, assuming the
default filesystem ACLs have not been changed.

You could avoid placing usernames and passwords in your CFMX datasources,
which would prevent people from browsing them through RDS, but I'm not sure
whether RDS will then give you a database login prompt to allow you to enter
that information then. Even if it does, you'd then have to pass USERNAME and
PASSWORD attributes within each CFQUERY tag, and one RDS user could simply
read the files of another user to find out the username and password. This
might be sufficient for your needs, but obviously it isn't a guarantee of
security.

You might instead consider setting up separate instances of CFMX, which
unfortunately would require that you purchase Enterprise edition. This would
allow you to isolate each curator.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
phone: 202-797-5496
fax: 202-797-5444 
_
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: dreamweaver mx/cfmx 6.1 rds - OT

2004-04-07 Thread Dave Watts
Thanks. So, if we did get Enterprise, what would be 
 necessary. Would I use the db security (Oracle/SQL 
 Server/Access) or something else?

At that point, you wouldn't need to rely on database security, in the sense
that you wouldn't have to use USERNAME and PASSWORD attributes within
CFQUERY. Instead, you'd have a different RDS password for each instance, and
that instance would only allow connections to the specific databases for
that application/user.

You would, of course, still create individual logins within your database as
appropriate.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
phone: 202-797-5496
fax: 202-797-5444
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]