Coldfusion FTP Solution

[NetworkGuy101]

Is there a way to implement permissions on say a doc file that resides in a coldfusion directory using a user database? For example I have 2 users:

Chris from Sony
Ed from NBC

I only want chris to access anything within the sony directory. This is easy for just page browsing. But what about files like word docs? If Ed got the full URL \sony\sony.doc I wouldnt want him to be able to put it in his broswer and download it.

 

[krisbrixon]

This is just a guess, I have not needed to put different security roles in the same directory, I have always just used different directories with OS security.

I would think that if the user figures out the full URL then ColdFusion would not be able to stop them from downloading it if it is just in a directory.

One option would be to stick the documents in the database, then it would have to run through some code even if they know the address.

Kris

 

[ecobb]

You could just move the document folders outside of the web root on the sever, then have the real path to them stored in the database. That way, you would have to be logged in to get the documents, and there's no other way to get to them from the outside world. If you have a tight application controlling who sees what...problem solved. (hopefully) (-:



Hope This Helps!

Ecobb
Beer Consumption Analyst

"My work is a game, a very serious game." - M.C. Escher

 

[NetworkGuy101]

Thanks Ecobb Great Idea

 

[NetworkGhost]

If you did this how would you get the documents to be downloaded? With cfcontent?

 

[TruthInSatire]

tell 'em what he's won alex.

Beware of programmers who carry screwdrivers.