For those of us who struggled with Advanced Security in ColdFusion prior to CFMX,
condolences to us all. I was on the Spectra team at Allaire and it was sometimes
similar to herding cats. It took ages to get all organized and then someone sneezed
and back we went again. Anyhow, Rob Rusher has a good article which among other
things, clarifies clearly the difference between Resource and User security in
ColdFusion MX and how to use each. There is also good info here on using Windows
security and LDAP with CF. Thanks Rob.

Security best practices, Authentication and Authorization on CFMX