









|
TECHNICAL WHITEPAPERS Savvy Security
First, a Savvy user must log in to Savvy before he/she can view the allowed documents. A user that does not have permission to view a folder or document will not see it in any way. That document or folder will not exist for that user! When a user requests a document, he/she is not simply redirected to the document server. To do so would allow the user (or someone with access to the user’s computer) to bookmark the page and access it later. The user would also have to have a user id and password to that server. Should the user’s rights to view that document be terminated, they would still be able to access it through their bookmark. To prevent this, Savvy DCS acts as a “go between” or “middle man” between the user and the RDS. Only the DCS knows where the RDS is located and only the DCS can log into it. The User never accesses the RDS directly! Savvy DCS fetches the document and forwards it to the user. The user thinks the document came from the DCS. They never see the RDS’s url at all. Savvy DCS does this by using a technique known as url rewriting. The DCS has a special folder named rdf. Nothing exists in this folder. But all documents appear to come from this folder since the DCS will map a given request to it. Attempting to access the folder through a bookmark will fail. |
||
Site Map | Contact Us | Home
Copyright © The Intersoft Group, Inc. 2004. All rights reserved. |