1. Authentication and Authorization in ColdFusion
Raymond Camden
Owner, Camden Media

2. Who am I? Raymond Camden ray@camdenfamily.com

3. What I will cover Adding a secure section to your web page
Adding various security roles

4. What I won’t cover
Security in terms of code (that’s another presentation!)
ColdFusion’s Roles-Based Security

5. Security (in 2 bullet points!)
Authentication
Proving that you are who you say you are
Authorization
Are you allowed to do that?

6. Authentication Typically a username and password Database LDAP
NT Domains

7. Authorization Roles specify who can do what
Easier to assign roles to groups
And then users to groups

8. Round One Demo No security Admin panel edit folder
Anyone and everyone can edit

9. Round Two Authentication on folder Hard coded password
How do I change my password?
What if someone guesses the password?

10. Round Three “Real” authentication (username+password)
Ability to work with more usernames/passwords

11. Round Four
Some people can do some things and some people can do other things.
Roles defines how the person acts within the application.
Groups are a simple way to define roles.

12. Q and A