I was building a content management system using Flash Remoting to view, add,
edit and delete records
when I realized that anyone can gain access to swf file via url. Although the
swf is embedded in a secure
admin.cfm page how can I prevent someone from pointing to the swf file and
making changes to records? At
this point I'm only using it to view records that are safe.

I was told to use cfcontent tag but the problem with this is my ISP does not
grant access to folders above my webroot.
Securring sensitive swf should be an option. How can I build an rich internet
application with out security?

If I get you right you load that movie into another movie and don't want the
first movie to be access standalone...

Just use a simple system... define a var _root.inflashapp = true; and check
for this in the loaded swf.