Hello,

A user has full access to the layer (layer group actually). No other 
restrictions. It looks like  "Enable data security" has no effect at all. 
Geoserver version is 2.8. Any idea what to test next?

BR,

Aki

Sent from Samsung Mobile


-------- Original message --------
From: Andrea Aime <[email protected]>
Date:20/12/2016 20:38 (GMT+02:00)
To: Aki Suvanto <[email protected]>
Cc: [email protected]
Subject: Re: [Geoserver-users] Question about gwc-service configuration same 
way than WMS-service

On Tue, Dec 20, 2016 at 3:28 PM, Aki Suvanto 
<[email protected]<mailto:[email protected]>> wrote:
Hello,

I have a question about Geoserver and it's configuration to certain services 
(WMS, WFS, gwc). How the gwc service should be configured that each user/role 
have permission to use only certain layer?

Example if I have different raster layers image1 and image2. I have managed to 
configure WMS-service so that certain role has access to specific raster layers 
(image1, image2) using username and password. When I am using gwc service all 
the raster layers are seeing to all roles and they can use them. Only 
restriction what I have used in gwc is service security. Basically certain role 
has access to gwc service but now I would like restrict gwc service only to 
certain raster layer?

Go in the "caching defaults" panel and check "Enable data security". As long as 
your rules are simple (full access to the layer or no access at all) it should 
work fine

Cheers
Andrea

--
==
GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.
==

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054  Massarosa (LU)
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39  339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it


AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i 
file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo 
? consentito esclusivamente al destinatario del messaggio, per le finalit? 
indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne 
il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di 
procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro 
sistema. Conservare il messaggio stesso, divulgarlo anche in parte, 
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalit? diverse, 
costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.



The information in this message and/or attachments, is intended solely for the 
attention and use of the named addressee(s) and may be confidential or 
proprietary in nature or covered by the provisions of privacy act (Legislative 
Decree June, 30 2003, no.196 - Italy's New Data Protection Code).Any use not in 
accord with its purpose, any disclosure, reproduction, copying, distribution, 
or either dissemination, either whole or partial, is strictly forbidden except 
previous formal approval of the named addressee(s). If you are not the intended 
recipient, please contact immediately the sender by telephone, fax or e-mail 
and delete the information in this message that has been received in error. The 
sender does not give any warranty or accept liability as the content, accuracy 
or completeness of sent messages and accepts no responsibility  for changes 
made after they were sent or for other risks which arise as a result of e-mail 
transmission, viruses, etc.

-------------------------------------------------------
------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/intel
_______________________________________________
Geoserver-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Reply via email to