User Guide

Chapter 19
Application Security
ColdFusion supports several levels of security. This chapter explains how to deploy
user security, which offers runtime security for ColdFusion applications. It also
describes the Remote Development Services security feature, which authenticates
developers accessing server resources through ColdFusion Studio.
For information on setting up security elements or using Administrator-controlled
security features, see Advanced ColdFusion Administration.
Contents
• ColdFusion Security Features ................................................................................356
• Remote Development Services (RDS) Security.....................................................356
• Overview of User Security.......................................................................................357
• Using Advanced Security in Application Pages.....................................................358
• Using the cfauthenticate tag ..................................................................................359
• Authentication and Authorization Functions.......................................................360
• Catching Security Exceptions.................................................................................361
• Using the cfimpersonate Tag..................................................................................362
• Example of User Authentication and Authorization............................................363