LiveDocs Comments - coldfusion - 6.1 - htmldocs - tags-p74.htm

coldfusion/6.1/htmldocs/tags-p74.htm

jrunrandy — 2005-06-28T12:35:18

Correct. I think the reason for this is that the code within cflogin only executes the first time. That is, once the user is logged in, ColdFusion doesn't go into the cflogin block.

coldfusion/6.1/htmldocs/tags-p74.htm

Soetji — 2005-06-02T11:40:58

It seems that GetAuthUser() and IsUserInRoles() work only outside .... You can't use them right after before . Is this correct?

coldfusion/6.1/htmldocs/tags-p74.htm

halL — 2004-12-16T10:58:44

I was incorrect in saying that the password attribute must be a unique string.
The password and name attributes are used together to generate a unique ID.
Therefore, if all name attributes are unique, you can use a value such as the empty string as the cflogin password attribute.

coldfusion/6.1/htmldocs/tags-p74.htm

-r- — 2004-12-10T19:11:22

halL said on Dec 2, 2004 at 1:54 PM :

"The ColdFusion uses the cfloginuser password attribute to generate a unique ID for the user.
The password attribute value does not have to be the user's true password, but must be a string that is unique among all users."

which contradicts the documentation for cflogin:

"A request that uses NTLM or Digest authentication. In this case, the username and password are hashed using a one-way algorithm in the Authorization header; ColdFusion gets the username from the web server and sets the cflogin.password value to the empty string."

So how can an empty string password be unique among all users?

coldfusion/6.1/htmldocs/tags-p74.htm

halL — 2004-12-02T13:54:41

The ColdFusion uses the cfloginuser password attribute to generate a unique ID for the user.
The password attribute value does not have to be the user's true password, but must be a string that is unique among all users.

coldfusion/6.1/htmldocs/tags-p74.htm

cf_Amir — 2004-11-25T13:23:37

what is the password attribute for ?!!

I user the user name and password to validate the user by a database, If it was valid then I run cfloginuser tag to login the user. What does cfloginuser need the password for?

coldfusion/6.1/htmldocs/tags-p74.htm

samihoda2 — 2004-09-27T11:58:40

What is the max length of the roles parameter? It seems to fails if there are too many roles...

coldfusion/6.1/htmldocs/tags-p74.htm

-ian — 2004-09-23T13:43:02

sorry, both require the tag...

coldfusion/6.1/htmldocs/tags-p74.htm

-ian — 2004-09-23T12:49:56

It should also be noted, the basics:
1) getAuthUser() requires the cflogin.
Calls: #GetAuthUser()#

2) Roles: Does not require . (Below is just a summary of Space sensitive already mentioned). Different roles are seporated by commas, but should not have spaces after the commas; otherwise, the space is required for testing it, for the space is included in that role name.
Calls: or
Ex: do something...

?- My question is if by default its in the session scope should calls to be it use the cflock (Readonly for verification tests, and Exclusive for setting)?

coldfusion/6.1/htmldocs/tags-p74.htm

DSole — 2004-09-16T23:35:23

Its worth mentioning that when checking for multiple roles,
isUserInRole checks for role1 AND role2 AND role3 etc, not OR

coldfusion/6.1/htmldocs/tags-p74.htm

ViLi — 2004-08-16T10:10:00

I can use the getAuthUser() and IsUserInRole(roles) to get the username and to check whether the user is a member of a particular role.

But.. I need to get the entire list of roles that a logged in user is a member of. There ought to have been a function called getAuthUserRoles() for this, but there isn't. The list of roles is stored in server memory - how can I retrieve that list??

coldfusion/6.1/htmldocs/tags-p74.htm

jrunrandy — 2004-05-20T05:46:44

Yes, you can use cfloginuser outside of cflogin, but it it only applies for the life of the request: See http://livedocs.macromedia.com/coldfusion/6.1/htmldocs/appsec11.htm#wp1139097 for more information

You can use cookie scope or session scope to maintain login information. See http://livedocs.macromedia.com/coldfusion/6.1/htmldocs/appsec10.htm for more information.

coldfusion/6.1/htmldocs/tags-p74.htm

toniu27 — 2004-05-19T20:47:20

can be used outside of block?

If browser does not enable memory-only cookie, get work or not? (before and after mx6.1)?

coldfusion/6.1/htmldocs/tags-p74.htm

halL — 2004-02-18T06:52:13

The example is on the cflogin page.
To see it, click the left-arrow at the top or bottom of the page, or the text link near the bottom of the text on this page.

coldfusion/6.1/htmldocs/tags-p74.htm

fstrevisan — 2004-02-17T16:30:25

Where is the example? It should be great to have some example, particularly cause this is a new tag...

coldfusion/6.1/htmldocs/tags-p74.htm

jrunrandy — 2003-09-26T05:37:54

You are correct. It should say cflogout.

coldfusion/6.1/htmldocs/tags-p74.htm

andremoh — 2003-09-26T02:27:14

"the login remains in effect until the session expires or the user is logged out by the cflogin tag"

I am confused how the user is logged out by the cflogin tag? is it supposed to be the cflogout tag?