Security
From ADF Docs
Overview
The ADF security framework contains measures to restrict direct access and remote component access.
Security Measures include:
- As a rule of thumb, none of the component methods within the ADF library have functions with methods with "remote" access
- Direct access to the ADF files are restricted to only valid, logged in CommonSpot users. This is controlled through the ADF root Application.cfc. In the onRequestStart function, logic is run to verify the user accessing the file directly is a logged in CommonSpot user.
- Remote access to component methods are requested through an Ajax Proxy that essentially allows access to methods in the ADF via a Proxy White List.
