cbsecurity
v3.x
Search…
⌃K
Links

XML Rules

Security rules in an XML file
You can place all your security rules inside of an XML file and then tell CBSecurity where they are:
config/Coldbox.cfc
// CB Security
cbSecurity : {
firewall : {
rules : {
provider : {
"source" : "config/security.xml.cfm"
}
}
}
}
Then your xml file can look like this:
config/security.xml.cfm
<?xml version="1.0" encoding="ISO-8859-1"?>
<-- <
Declare as many rule elements as you want, order is important
Remember that the securelist can contain a list of regular
expressions if you want
​
ex: All events in the user handler
user\..*
ex: All events
.*
ex: All events that start with admin
^admin
​
If you are not using regular expressions, just write the text
that can be found in an event.
-->
<rules>
<rule>
<match>event</match>
<whitelist>user\.login,user\.logout,^main.*</whitelist>
<securelist>^user\..*, ^admin</securelist>
<roles>admin</roles>
<permissions>read,write</permissions>
<redirect>user.login</redirect>
</rule>
​
<rule>
<match>event</match>
<whitelist></whitelist>
<securelist>^moderator</securelist>
<roles>admin,moderator</roles>
<permissions>read</permissions>
<redirect>user.login</redirect>
</rule>
​
<rule>
<match>url</match>
<whitelist></whitelist>
<securelist>/secured.*</securelist>
<roles>admin,paid_subscriber</roles>
<permissions></permissions>
<redirect>user.pay</redirect>
</rule>
</rules>