Thunderstone Support Forums

What is the proper way to set up a search on a secure site?

We have lots of sensitive information on a secure web site. I want the people who have credentials for the site to see search results, and anyone else who stumbles upon the search page to either be unable to get to the search, or at the very least be unable to see the results.

Indexing and searching is going fine--I just want to limit access to search results.

Thanks for your help!
Cathi

PS. Additional info that may help explain the problem. We are using the free version. One profile indexes and searches our http public site. I'm working on a second profile to index and search the part that's https.

Yes, it's IIS. Would that require one virtual directory for the public site (OK for anonymous users) and one directory for the private site?

Does that mean two different installations or not? When setting up the second profile, it asks for a new location for the database. Can the security be set at that level?

It just seems messy to have to do two separate installations to search a private site and a public site. Is there any way to set the security at the profile level?