>ColdFusion is set up to handle security, which means that
> user's sign in
> via a web form. A userID is cross-referenced with the table data and
> before showing any 'secure' data, the system checks to make sure the
> current user has access to it.
>
> If I create a verity collection wi
Absolutely brilliant!! I wish I had thought of that, much thanks.
At 04:29 PM 03/05/2001 +, you wrote:
> >ColdFusion is set up to handle security, which means that
> > user's sign in
> > via a web form. A userID is cross-referenced with the table data and
> > before showing any 'sec
But, what if the secure data is not in a table, but documents. Don't the
custom fields only work when indexing against a database?
Ropo
-Original Message-
From: Jeffry Houser [mailto:[EMAIL PROTECTED]]
Sent: Monday, March 05, 2001 2:07 PM
To: CF-Talk
Subject: RE: Verity and Sec
cfsearch output to check for this.
-Original Message-
From: Belfiori, Ross [mailto:[EMAIL PROTECTED]]
Sent: Monday, March 05, 2001 11:38 AM
To: CF-Talk
Subject: RE: Verity and Security.. ??
But, what if the secure data is not in a table, but documents. Don't the
custom fields only
I think you'll have to with query of query - unless you can use verity's
language to filter - something like AND "Group A" - but if you had a
document that contained "Group A" but belonged to group b, you'd be
screwed - so back to QofQ.
- Original Message -
From: "Ian Vaughan" <[EMAIL
, dltitle, dlpath, security, dldate
from downloads
WHERE security IN (#PreserveSingleQuotes(session.groupname)#)
OR
security = 'all'
ORDER BY dldate DESC
-Original Message-
From: Deanna Schneider [mailto:[EMAIL PROTECTED]
Sent: 17 May 2005 14:44
To: CF-Talk
Subject: Re:
There's a format to query the custom fields directly, using
http://livedocs.macromedia.com/coldfusion/6.1/htmldocs/indexs22.htm
-Original Message-
From: Deanna Schneider [mailto:[EMAIL PROTECTED]
Sent: Tuesday, 17 May 2005 9:44
To: CF-Talk
Subject: Re: Verity and Security
I
14:51
To: CF-Talk
Subject: RE: Verity and Security
There's a format to query the custom fields directly, using
http://livedocs.macromedia.com/coldfusion/6.1/htmldocs/indexs22.htm
-Original Message-
From: Deanna Schneider [mailto:[EMAIL PROTECTED]
Sent: Tuesday, 17 May 2005 9:44
T
rtRow = "#Form.StartRow#"
>
> >
>
> -Original Message-
> From: James Holmes [mailto:[EMAIL PROTECTED]
> Sent: 17 May 2005 14:51
> To: CF-Talk
> Subject: RE: Verity and Security
>
> There's a format to query the custom fields directly, using
results not
just the results the users security is allowed to view
-Original Message-
From: Raymond Camden [mailto:[EMAIL PROTECTED]
Sent: 17 May 2005 17:47
To: CF-Talk
Subject: Re: Verity and Security
You don't need the preservesinglequotes for sure. This isn't a SQL call.
me = "GetResults"
> collection = "idocs"
> type = "simple"
> criteria = "#HTMLEditFormat(Form.Criteria)#"
> maxRows = "#Evaluate(Form.MaxRows + Form.StartRow)#"
> startRow = "#Form.StartRow#"
>
Ray
I changed what you suggested shown below, but it is still returning no
results ??
-Original Message-
From: Raymond Camden [mailto:[EMAIL PROTECTED]
Sent: 18 May 2005 16:56
To: CF-Talk
Subject: Re: Verity and Security
You need to change CUSTOM2 to CF_CUSTOM2
On 5/18/05, Ian
Ray
I changed what you suggested shown below, but it is still returning no
results ??
~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble
Ticket application
http://www.houseoffusion.com/banners/view.cfm?banner
uot;
> startRow = "#Form.StartRow#"
> >
>
>
> -Original Message-----
> From: Raymond Camden [mailto:[EMAIL PROTECTED]
> Sent: 18 May 2005 16:56
> To: CF-Talk
> Subject: Re: Verity and Security
>
> You need to change CUSTOM2 to CF_CUS
y 2005 14:16
To: CF-Talk
Subject: Re: Verity and Security
So when you remove the second portion - and you cfdump the results, you
do see custom2 containing #session.groupname#, correct?
On 5/19/05, Ian Vaughan <[EMAIL PROTECTED]> wrote:
> Ray
>
> I changed what you suggested shown be
I haven't been following this thread, so I may be repeating something
already said, but...
Don't you need to put the groupname in double quotes (make it a
phrase) if it contains spaces or reserved words for verity queries?
so...
""#session.groupname#""
Jerry Johnson
Web Developer
On 5/19/05,
mond Camden [mailto:[EMAIL PROTECTED]
> Sent: 19 May 2005 14:16
> To: CF-Talk
> Subject: Re: Verity and Security
>
> So when you remove the second portion - and you cfdump the results, you
> do see custom2 containing #session.groupname#, correct?
>
> On 5/19/05, Ian Vaughan
Ray
Yeah when removing the second portion ( and CF_CUSTOM2
#session.groupname#" ) and cfdump the results
I am seeing custom 2 with the correct groupname for that document i.e.
'ALL IT'
~|
Logware (www.logware.us): a new and c
entation for details.
-Original Message-
From: Jerry Johnson [mailto:[EMAIL PROTECTED]
Sent: 19 May 2005 15:10
To: CF-Talk
Subject: Re: Verity and Security
I haven't been following this thread, so I may be repeating something
already said, but...
Don't you need to put the gr
Remember to escape quotes. You would need to change
"#session.groupname#" to ""#session.groupname#"". I'm not convinced
htat is your problem - but try it.
On 5/19/05, Ian Vaughan <[EMAIL PROTECTED]> wrote:
> Jerry
>
> Thanks for the tip, just tried what you suggested
>
> name = "GetResu
Remember to escape the double quotes (put two doublequotes together)
within a doulequoted string ...
"#HTMLEditFormat(Form.Criteria)# and CF_CUSTOM2
""#session.groupname#"""
Jerry Johnson
Web Developer
On 5/19/05, Ian Vaughan <[EMAIL PROTECTED]> wrote:
> Jerry
>
> Thanks for the tip, just trie
TECTED]
Sent: 19 May 2005 16:42
To: CF-Talk
Subject: Re: Verity and Security
Remember to escape the double quotes (put two doublequotes together)
within a doulequoted string ...
"#HTMLEditFormat(Form.Criteria)# and CF_CUSTOM2
""#session.groupname#"""
Jerry Johnson
Listen to Ray more than me, because I half (thankfully) flushed all
Verity knowledge from my brain 6 months ago. Now it is full of FTS
search knowledge.
I also never used the custom fields, but instead customized the .zon
and .ddd files.
When I searched, I always wrote my verity queries like:
(#
Are you inside a cfloop query=your search result, or cfoutput
query=yoursearchresult? custom2 is one of the columns returned in the
query result.
On 5/19/05, Ian Vaughan <[EMAIL PROTECTED]> wrote:
> Ray / Jerry
>
> That seems to have solved that problem, but it is stating that the
> custom2 varia
-Original Message-
From: Raymond Camden [mailto:[EMAIL PROTECTED]
Sent: 19 May 2005 19:14
To: CF-Talk
Subject: Re: Verity and Security
Are you inside a cfloop query=your search result, or cfoutput
query=yoursearchresult? custom2 is one of the
I'm confused. I thought you said the search was working now - since
you added quotes around the part for custom2. I thought it was working
but you just had a bug with the cfdump?
On 5/20/05, Ian Vaughan <[EMAIL PROTECTED]> wrote:
> Ray
>
> In my search I was just doing a . However when
> I remov
it
shows that the custom2 field is populated. It seems strange then that
when the following code above is added no results come back ??
-Original Message-
From: Raymond Camden [mailto:[EMAIL PROTECTED]
Sent: 20 May 2005 12:25
To: CF-Talk
Subject: Re: Verity and Security
I'm confused.
Did you try as well?
On 5/20/05, Ian Vaughan <[EMAIL PROTECTED]> wrote:
> Nope even with the quotes shown in the results page I sent in the last
> post, the search is returning no results ? .
>
> What is strange though is if I remove the
>
> and CF_CUSTOM2 ""#session.groupname#"""
~~
You might try on a field you know is standard and populated
and where you know what the data looks like (to get the syntax down)
like TITLE
On 5/20/05, Raymond Camden <[EMAIL PROTECTED]> wrote:
> Did you try as well?
>
~|
Logwa
> I wanted to get some feedback on how you go about scheduling
> the re-indexing of files with Verity, and where the actual
> code runs. Do you usually put your re-indexing code in a
> web-accessible directory and just use the cfschedule tag or
> admin to run it? Do you use a scheduled task w
You could put it in a directory on your webserver that has access
limited to 127.0.0.1 which would only allow the page to be called from
on the server itself. This should allow CF to call it or if you were
physically on the machine you could call it, but no one could call it
directly from another
> -Original Message-
> From: Andrew Tyrone [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, February 01, 2005 2:47 PM
> To: CF-Talk
> Subject: Verity and security through obscurity
>
> Hi everyone,
>
> Obscuring the file doesn't seem to be the best solution, but if you're
> using
> cfschedule,
32 matches
Mail list logo
