Autodesk 15606-011408-9320 User Guide - Page 48

Security, Using Windows NT or Windows 2000 Security, Using Web Server Security

Page 48 highlights

Security Online Help Index Windows NT, security Windows 2000, security Online Help Index web server security Security is an important consideration when setting up any kind of server application. With Autodesk MapGuide, you can implement security for your server computer at a number of different levels. There are three main methods for setting up security:  Use the Windows NT or Windows 2000 Administrator tools to set security for files and directories on the server computer.  Use your web server to set security for virtual directories. Plan your direc- tory structure so that files requiring security are above the web root.  Use Autodesk MapGuide to set up user IDs and passwords, access keys, and passkeys to protect resources (such as SDFs and databases), maps, and map layers. Using Windows NT or Windows 2000 Security We recommend that you review the security settings for all folders on your server and adjust them appropriately, depending on the files they contain. If your Autodesk MapGuide Server directories are on a drive that uses the file allocation table (FAT) file system, you do not need to set Windows permissions, because all users have access to all files and directories. If these directories are on a drive that uses a Windows NT File System (NTFS), you must set the appropriate permissions on these directories for each account intended to access these directories. In addition to setting security for individual files and directories, you can also set security for all directories controlled by your web server. The next section discusses this approach. Using Web Server Security When you create a web publishing directory, you can set access permissions for the defined home directory or virtual directory and all of the directories below it. The World Wide Web (WWW) service provides the access permissions, which are in addition to the permissions provided by the NTFS file system. Note that ColdFusion template files (.cfm files) interact with the web server in a similar manner to a CGI scripting process, so any directory containing these files must also have Execute access. 48 | Chapter 3 Designing Your System

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190

48
|
Chapter 3
Designing Your System
Security
Security is an important consideration when setting up any kind of server
application. With Autodesk MapGuide, you can implement security for your
server computer at a number of different levels. There are three main
methods for setting up security:
Use the Windows NT or Windows 2000 Administrator tools to set security
for files and directories on the server computer.
Use your web server to set security for virtual directories. Plan your direc-
tory structure so that files requiring security are above the web root.
Use Autodesk MapGuide to set up user IDs and passwords, access keys, and
passkeys to protect resources (such as SDFs and databases), maps, and map
layers.
Using Windows NT or Windows 2000 Security
We recommend that you review the security settings for all folders on your
server and adjust them appropriately, depending on the files they contain. If
your Autodesk MapGuide Server directories are on a drive that uses the file
allocation table (FAT) file system, you do not need to set Windows permis-
sions, because all users have access to all files and directories. If these direc-
tories are on a drive that uses a Windows NT File System (NTFS), you must
set the appropriate permissions on these directories for each account
intended to access these directories.
In addition to setting security for individual files and directories, you can also
set security for all directories controlled by your web server. The next section
discusses this approach.
Using Web Server Security
When you create a web publishing directory, you can set access permissions
for the defined home directory or virtual directory and all of the directories
below it. The World Wide Web (WWW) service provides the access permis-
sions, which are in addition to the permissions provided by the NTFS file
system. Note that ColdFusion template files (
.cfm
files) interact with the web
server in a similar manner to a CGI scripting process, so any directory
containing these files must also have Execute access.
Online Help Index
Windows NT, security
Windows 2000, security
Online Help Index
web server
security