Programming ColdFusion

Name

IsProtected — New as of ColdFusion 4.5

Synopsis

IsProtected(resourcetype, resourcename [, action])

Returns True if the specified resource is protected by a rule within the security context of the currently authenticated user. The parameter resourcetype specifies the type of resource to check while resourcename specifies the actual name of the resource. Possible resource types include Application, CFML, Collection, Component, CustomTag, Datasource, File, Function, User, and UserObject. action is required for all resource types except Component, CustomTag, Function, and User and specifies the action of the resource to check. The following table lists each resource type along with possible values for action:

Resource Type	Possible Values for Action
Application	All, UseClientVariables
CFML	Any valid action of the CFML tag specified in resourcetype
Collection	Delete, Optimize, Purge, Search, Update
Component	N/A
CustomTag	N/A
Datasource	All, Connect, Delete, Insert, Select, SP (stored procedure), Update
File	Read, Write
Function	N/A
User	N/A
UserObject	action as specified in the ColdFusion Administrator

In order to use the IsProtected( ) function, Advanced Security needs to be enabled within the ColdFusion Administrator, and a valid security context must already be defined. The following example uses the IsProtected( ) function to determine if file uploading via CFFILE is a protected resource:

<CFIF IsProtected('CFML', 'CFFILE', 'Upload')> File uploading ...