ColdFusion Question

[Boethius]

I would like to create a preview manager using coldfusion. I have already incorporated the following features:

Admin environment

• User add/remove/change using MySQL Queries
  Password add/remove/change using MySQL Queries
  Directory add/remove/change using MySQL Queries
  Logout

User envrionment

• Login/out using MySQL Queries

My question is:

• How can I using an Application.cfm check each folder for the active user account and thereby permit/prohibit access using session variables?
  What would an API look like for this?
  Are there any special features in CF or is it more of a manual programming task?

Thanks for your interest!

 

[greerde]

I'm sure it can be done...but let me make sure i understand what you are trying to do.

You want to dynamically create directories and then dynamically manage what users have access to each directory?

 

[alisajid]

You'll have a login_action.cfm (or similar page) where you wil set <CFSET Session.LoggedIn = True>.

In the corresponding application.cfm pages you would check <CFIF Session.LoggedIn>.

All of these features are builtin CF tags and script.

 

[Boethius]

Thanks for the reply!!!

Yes, unfortunately I have already tried that, the session.userid variables are not passed through to the next Application.cfm, and that is why no one can gain access to it. Is there a way of transferring session variables from one Apllication.cfm to another Application.cfm in a subfolder?
I've heard that its possible to use the windows user management for access policies, but it might get complicated because dev. is on windows, and the live server is linux. And using LDAP is complete overkill.

Maybe there is a way of passing variables across Application.cfms without posting, or using a cfinclude template. I could also be thinking in the wrong direction... can anyone help?

Thanks,