Hello Sadly I can not send you my data directory. Thank you very much for your suggestions. I noticed couple of things. If you have a second, can you also test it like that ( I will try my best to write it down as good as possible). First, I have a datadir from I think version 2.2 or something. I have upgraded geoserver in the past from 2.2 -> 2.8 (I think) -> 2.10 and now 2.15.2/2.16.
The long story short, the problem might be when I give ADMIN the read and write to all the layers and only give all other users (*) the access to certain workspaces. Locking down GeoServer so to speak. It works in 2.10. Longer version: First: In "Data" menu, the "Catalog mode" is HIDE. My layers.properties (I deleted couple of other workspaces and renamed my workspace name): *.*.w=ADMIN *.*.r=ADMIN mode=HIDE myworkspace.*.r=* If I am LOGGED IN to Geoserver GUI and open a wms.1.1.1 getcapabilities, then I see all my layers and layer groups as I should. When I am LOGGED OUT, then I see only the layers, no layer groups in the document. When I change the catalog mode to Challenge and reopen the getcapabilities document while logged out, then I see all the layers and layergroups. Even those that are supposed to be seen only to a role. The second attempt. I returned the catalog mode to HIDE. I added "myworkspace.mylayergroup.r=*" to the rules. Now my layers.properties file is like this: *.*.w=ADMIN *.*.r=ADMIN mode=HIDE myworkspace.*.r=* myworkspace.mylayergroup.r=* I am logged out and I open the getcapabilities document. I see only layers that are in that workspace, not layer groups. Now I delete the "myworkspace.*.r=*" rule and now my layers.properties file looks like this: *.*.w=ADMIN *.*.r=ADMIN mode=HIDE myworkspace.mylayergroup.r=* Now, I log out of the Geoserver GUI and reopen the wms1.1.1 getcapabilities document. Now I see my layergroup but not other individual layers that are in the same workspace. For some reason, when the "ADMIN" has both the read and write to all, then the layer groups are not visible. If i leave my layers.properties file as it was originally and only change the "*.*.r=ADMIN" to "*.*.r=*", then it all works. That means, that I can see the layer groups when I am logged out. But if I understand the manual correctly, I should be able to lock the geoserver layer visibility down? I hope my text does make sense. If you have any suggestions, please let me know. Maario ________________________________ Saatja: Andrea Aime <[email protected]> Saadetud: kolmapäev, 18. september 2019 10:26 Adressaat: Maario Tumanski <[email protected]> Koopia: [email protected] <[email protected]> Teema: Re: [Geoserver-users] GS 2.15.2 layer group not visible in GetCapabilities HI Maario, we have several 2.15.x installations in production where this is not occurring, I'm guessing there is something specific in your data directory that makes it happen, probably going along the new security handling of layer groups. Could you share the data dir? Even better, are you able to reproduce it in a stand-alone small data dir, and share it? Cheers Andrea On Wed, Sep 18, 2019 at 8:51 AM Maario Tumanski <[email protected]<mailto:[email protected]>> wrote: Hello No, I don't use jdbcconfig module. I doublechecked, the layers that belong to that layergroup are both enabled and advertised and store is enabled. It doesn't show any layergroups in the wms 1.1.1 getcapabilities document when I am not logged in to the GUI (layergroups themselves are visible and accessible on the layer preview page). But older installation (live environment with 2.10.0) does show them. I cloned the data directory for the GS2.15.2 from the old installation. Maario ________________________________ Saatja: Jan Boonen <[email protected]<mailto:[email protected]>> Saadetud: teisipäev, 17. september 2019 20:36 Adressaat: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> Teema: Re: [Geoserver-users] GS 2.15.2 layer group not visible in GetCapabilities Hi Mario, Are you using the JDBCConfig module? I had a similar problem while upgrading from 2.8 to 2.12 and found a solution, see: http://osgeo-org.1560.x6.nabble.com/Layers-missing-in-WMS-Capabilities-after-upgrade-td5356567.html. I'm not sure if the same problem can occur when you are using the file-based configuration, but it's worth to check the resource.advertised, resource.store.enabled and resource.enabled properties of your feature and layer configurations. Kind regards, Jan -------------------------------------- Geodan Buitenhaven 27-A 5211 TP 's-Hertogenbosch (NL) T +31 (0)73 - 692 5151 M +31 (0)6 - 2395 1191 E [email protected]<mailto:[email protected]> www.geodan.nl<https://www.geodan.nl> | disclaimer<https://www.geodan.nl/disclaimer/> -------------------------------------- Op di 17 sep. 2019 om 13:06 schreef Maario Tumanski <[email protected]<mailto:[email protected]>>: Hello I have a GS 2.15.2 installation (Centos 7, openjdk 11). I upgraded it on top of the GS 2.10.0 data directory. I noticed that when making anonymous wms 1.1.1 GetCapabilities request, then the layer groups are not visible anymore. When I log into GUI and repeat the request, then everything works as I expect. Other layers in same workspace are visible in result. On the 2.10.0 installation with the same request, it works. Is this expected behaviour? Thanks and all the best Maario _______________________________________________ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer [email protected]<mailto:[email protected]> https://lists.sourceforge.net/lists/listinfo/geoserver-users _______________________________________________ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer [email protected]<mailto:[email protected]> https://lists.sourceforge.net/lists/listinfo/geoserver-users -- Regards, Andrea Aime == GeoServer Professional Services from the experts! Visit http://goo.gl/it488V for more information. == Ing. Andrea Aime @geowolf Technical Lead GeoSolutions S.A.S. Via di Montramito 3/A 55054 Massarosa (LU) phone: +39 0584 962313 fax: +39 0584 1660272 mob: +39 339 8844549 http://www.geo-solutions.it http://twitter.com/geosolutions_it ------------------------------------------------------- Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE 2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si precisa che ogni circostanza inerente alla presente email (il suo contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra operazione è illecita. Le sarei comunque grato se potesse darmene notizia. This email is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential or otherwise protected from disclosure. We remind that - as provided by European Regulation 2016/679 “GDPR” - copying, dissemination or use of this e-mail or the information herein by anyone other than the intended recipient is prohibited. If you have received this email by mistake, please notify us immediately by telephone or e-mail.
_______________________________________________ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer [email protected] https://lists.sourceforge.net/lists/listinfo/geoserver-users
