The Basic Security section of the Administrator provides these pages to configure ColdFusion Server basic security:
Page |
Description |
---|---|
CF Admin Password |
Lets you assign and change passwords for the ColdFusion Administrator |
Tag Restrictions |
Lets you restrict the use of specific tag and tag attributes |
CF Studio Password |
Lets you assign and change passwords for ColdFusion Studio |
You use the CF Admin Password of the Administrator page to enable and disable password-restricted access to the Administrator, and to change the Administrator password.
Note Enabling Use ColdFusion Administration Authentication in the Advanced Security page disables the passwords set in the Basic Security page. |
You use the Tag Restrictions page of the Administrator to enable and disable tags and tag attributes, and to specify a directory where tag restrictions are not enforced. Tag restrictions can be useful to ColdFusion Server hosting providers by preventing developers from executing tags that could save, change, or delete files on the server.
By default, all tags are enabled when ColdFusion Server is installed. To disable a tag, clear its check box.
To specify a directory in which otherwise blocked tags can be executed, enter the file path in the Unsecured Tags Directory text field. The default directory is the Administrator.
Warning If you change the directory from the default ColdFusion Server directory and you disable the |
You can restrict access to the following tags:
cfcontent
cfdirectory
cffile
cfobject
cfregistry
cfadminsecurity
cfexecute
cfftp
cflog
cfmail
You can restrict access to the following tag attributes:
You use the CF Studio Password page to enable and disable password-restricted access to server resources within ColdFusion Studio using Remote Development Services (RDS), and to change the password.
Warning Enabling Use ColdFusion Studio Authentication in the Advanced Security page disables the passwords set in the Basic Security page. |
Enabling Use ColdFusion Administration Authentication or Use ColdFusion Studio Authentication in the Advanced Security page disables the passwords set in the Basic Security page.
Note If you use ColdFusion RDS, you must stop and restart the ColdFusion RDS after you change passwords. |