User, Permission Management

2006-01-07 Thread Baz
Hi, I'm curious how people are handling session/user/permission/login management these days... Have most of you implemented your own custom solutions? Do a lot of people use cflogin? Are people using CFC roles? How are people handling checking permissions for each page? Do you check against

Re: User, Permission Management

2006-01-07 Thread James Holmes
I use CFLOGIN with CFC roles. This provides for the user/admin/etc scenario and generally suffices for most of our security needs. The authentication is done via LDAP and everything is secured via SSL. Security checking for each page is done with IsUserInRole(), which therefore works with memory.

RE: User, Permission Management

2006-01-07 Thread Snake
- From: Baz [mailto:[EMAIL PROTECTED] Sent: 07 January 2006 10:32 To: CF-Talk Subject: User, Permission Management Hi, I'm curious how people are handling session/user/permission/login management these days... Have most of you implemented your own custom solutions? Do a lot of people use cflogin

RE: User, Permission Management

2006-01-07 Thread Dawson, Michael
for CFC roles? M!ke -Original Message- From: James Holmes [mailto:[EMAIL PROTECTED] Sent: Saturday, January 07, 2006 6:18 AM To: CF-Talk Subject: Re: User, Permission Management I use CFLOGIN with CFC roles. This provides for the user/admin/etc scenario and generally suffices for most

Re: User, Permission Management

2006-01-07 Thread Matt Robertson
contains admin do admin stuff here cfelse do normal stuff here /cfif Am I missing the actual reason for CFC roles? M!ke -Original Message- From: James Holmes [mailto:[EMAIL PROTECTED] Sent: Saturday, January 07, 2006 6:18 AM To: CF-Talk Subject: Re: User, Permission

RE: User, Permission Management

2006-01-07 Thread Baz
Hey Matt, Where can we take a look at this product? Cheers, Baz -Original Message- From: Matt Robertson [mailto:[EMAIL PROTECTED] Sent: Saturday, January 07, 2006 12:18 PM To: CF-Talk Subject: Re: User, Permission Management disclaimer: I'm describing a commercial product I sell. I

RE: User, Permission Management

2006-01-07 Thread Snake
To: CF-Talk Subject: RE: User, Permission Management Hey Matt, Where can we take a look at this product? Cheers, Baz -Original Message- From: Matt Robertson [mailto:[EMAIL PROTECTED] Sent: Saturday, January 07, 2006 12:18 PM To: CF-Talk Subject: Re: User, Permission Management disclaimer

Re: User, Permission Management

2006-01-07 Thread Matt Robertson
-Original Message- From: Matt Robertson [mailto:[EMAIL PROTECTED] Sent: Saturday, January 07, 2006 12:18 PM To: CF-Talk Subject: Re: User, Permission Management disclaimer: I'm describing a commercial product I sell. I have users, permissions, groups and profiles. Anything you want can

Re: User, Permission Management

2006-01-07 Thread James Holmes
They are great when sharing a CFC with another developer. They add a level of self-documentation and prevent someone who doesn't read documentation from incorrectly providing people access to the wrong things. It'a about keeping the CFC self-contained and ensuring the integrity of the app in the

RE: User, Permission Management

2006-01-07 Thread Baz
, Permission Management They are great when sharing a CFC with another developer. They add a level of self-documentation and prevent someone who doesn't read documentation from incorrectly providing people access to the wrong things. It'a about keeping the CFC self-contained and ensuring the integrity

Re: User, Permission Management

2006-01-07 Thread James Holmes
I don't handle roles that way. I check to see if the user is in an appropriate role in the interface code, with IsUserInRole(); if the CFC throws a roles error it means there's a programming error so I let it fail to my CFERROR handler template (which emails me and tells me to fix the code). This

RE: User, Permission Management

2006-01-07 Thread Baz
, Baz -Original Message- From: James Holmes [mailto:[EMAIL PROTECTED] Sent: Saturday, January 07, 2006 7:35 PM To: CF-Talk Subject: Re: User, Permission Management They are great when sharing a CFC with another developer. They add a level of self-documentation and prevent someone who