Adobe ColdFusion 8 Web Application Construction Kit, Volume 1: Getting Started

Using Roles to Dynamically Restrict Functionality

So far, the examples in this chapter provide the same level of access for each person. That is, each user is allowed access to the same type of information. ColdFusion’s <cflogin> framework also provides a simple way for you to create applications in which different people have different levels of access. The idea is for your code to make decisions about what to show each user based on the person’s role (or roles) in the application.

Note

For the purposes of this discussion, consider the word “role” to be synonymous with group, right, or privilege. The example application for this book thinks of roles as groups. That is, each contact is a member of a role called Admin or User or the like. Those ...