Sandbox Settings Ignored

[CourtneyP]

I am trying to set up sandbox security and ColdFusion seems to be ignoring the
settings. I checked the box to enable sandbox security and I restarted the
JRun ColdFusion service. I have removed access to all datasources, functions
and tags and the test page I have setup still is allowed to access a database.

We've had trouble setting this up in the past on other servers, but I can't
remember what we did to fix the problem. I thought it was something to do with
editing neo-security.xml, but I am not 100% sure.

Any help would be greatly appreciated.

[DStanten]

Sounds like you installed using the 'multi-server' configuration (option 2).
Check to see if you added the -Djava.security.manager setting to the jvm.config
as detailed here:
[url]http://livedocs.macromedia.com/coldfusion/7/htmldocs/00000025.htm[/url] (and be sure
to follow the comment at the bottom of this page about the quotes being in the
wrong place).