Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

I need to know what security is in place when running a CFM page

Posted on 2004-08-19
5
Medium Priority
?
152 Views
Last Modified: 2013-12-24
I am an ODBC developer and not a Cold Fusion developer. I need to know what security rights my ODBC .dll will be running under when it is called when used as an ODBC Socket DataSource from Cold Fusion. I am running on W2003 and running CF MX6.1, but would need to know for version 4 and 5 also if it has changed. I know that ASP security is determinded in the Directory Security setup of IIS admin, which is nomally the Internet Guest Account. What is it in Cold Fusion and where is it configured?
0
Comment
Question by:azfronz
  • 2
5 Comments
 
LVL 35

Accepted Solution

by:
mrichmon earned 500 total points
ID: 11853748
You do not use ODBC DSNs in CF MX, like you would in older versions - you just specify the DSN in the CF Admin

In older CF it runs under everyone and possibly the administrator account or so I've heard.

In newer CF (MX and up) I have not seen any permissions needed other than the Internet Guest Account, but that may be dependant on setup.
0
 

Author Comment

by:azfronz
ID: 11854009
I am aware in MX I have to make a Data Source from my DSN and can only use the data source. My assumption, is that the rights that my ODBC driver will have is the rights of the user assigned in the Services Panel in Windows to control the ColdFusion startup. (Normally Local System Account). But I need to know for sure.
0
 

Author Comment

by:azfronz
ID: 12070788
Yes, I would like someone who knows the answer to verify what securty setting affects the ODBC dll run from Cold Fusion. Not it depends on the setup. Give some examples of different setup sinerios if there is more than one. I don't know Cold Fusion, that is why I am asking the question.

Thanks
0

Featured Post

[Webinar] Cloud Security

In this webinar you will learn:

-Why existing firewall and DMZ architectures are not suited for securing cloud applications
-How to make your enterprise “Cloud Ready”, and fix your aging DMZ architecture
-How to transform your enterprise and become a Cloud Enabler

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

One of the typical problems I have experienced is when you have to move a web server from one hosting site to another. You normally prepare all on the new host, transfer the site, change DNS and cross your fingers hoping all will be ok on new server…
When it comes to security, close monitoring is a must. According to WhiteHat Security annual report, a substantial number of all web applications are vulnerable always. Monitis offers a new product - fully-featured Website security monitoring and pr…
Please read the paragraph below before following the instructions in the video — there are important caveats in the paragraph that I did not mention in the video. If your PaperPort 12 or PaperPort 14 is failing to start, or crashing, or hanging, …
Screencast - Getting to Know the Pipeline
Suggested Courses

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question