Security
- Geoff Bowers
Overview
FarCry CMS has a very versatile security model that will integrate with a variety of user directories including its own internal directory, external datasources, LDAP and Active Directory.
Essentially FarCry insists that a user is authenticated via username and password. A successful authentication will return the group membership of the user to FarCry. Within FarCry's security model, user groups map to roles (aka policy groups) within Farcry. Each role has a collection of permissions that are then assigned to the user.
The authentication process can use FarCry's internal user directory or alternatively be bypassed to use an external system. You need to ensure that the external systems groups map to the relevant policy or role within FarCry.
User Guide
Case study running through the creation of a user, assigning a role and setting up role based security in the site overview tree. FarCry ships out of the box with a default set of security roles that can be easily modified to suit individual needs.
Additional Information
- External Authentication — External authentication involves subverting FarCry's normal user directory model and replacing it with one of your own. This is useful if you don't want to manage multiple user directories and would prefer to keep directory information in the one place.
- Using Windows NT Authentication — Before you can set up Active Directory or Windows Domain authentication you need to register NTAdmin.dll to enable ColdFusion to talk to Active Directory.
- Setting up Active Directory — A how-to and sample code for setting up Active Directory as your default FarCry user directory.
- Authentication Using an Existing MSSQL Application — This document is intended to help outline the requirements for adding a new UserDirectory via an external database. The methods described below were written with MSSQL in mind, but should work with databases that support views. It is assumed that you have good working knowledge of databases, the external database to link in particular.
- Default Security Roles — FarCry ships with a series of default security roles out of the box. These roles are mapped to groups within the default FarCry userdirectory.