Emanuele Tajariol ( 
https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5b30cec10f76dc2e8c37cc93
 ) *created* an issue

GeoServer ( 
https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiYjYxZjQwNWY3ZjM1NDA1Yjk0NjFjYTU2YjRhZDQyMjIiLCJwIjoiaiJ9
 ) / Improvement ( 
https://osgeo-org.atlassian.net/browse/GEOS-10682?atlOrigin=eyJpIjoiYjYxZjQwNWY3ZjM1NDA1Yjk0NjFjYTU2YjRhZDQyMjIiLCJwIjoiaiJ9
 ) GEOS-10682 ( 
https://osgeo-org.atlassian.net/browse/GEOS-10682?atlOrigin=eyJpIjoiYjYxZjQwNWY3ZjM1NDA1Yjk0NjFjYTU2YjRhZDQyMjIiLCJwIjoiaiJ9
 ) GeoFence: data access control in WPS calls ( 
https://osgeo-org.atlassian.net/browse/GEOS-10682?atlOrigin=eyJpIjoiYjYxZjQwNWY3ZjM1NDA1Yjk0NjFjYTU2YjRhZDQyMjIiLCJwIjoiaiJ9
 )

Issue Type: Improvement Assignee: Unassigned Components: GeoFence Created: 
29/Sep/22 12:12 PM Priority: Medium Reporter: Emanuele Tajariol ( 
https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5b30cec10f76dc2e8c37cc93
 )

Some WPS processes may be exposing data that should not be accessible, while 
some other processes should be allowed. For instance, we may want to allow 
stats computation on a layer (via gs:Aggregate ), but disallow data downloading 
( gs:Download ).

There’s a full description of this issue on the GeoFence repo at 
https://github.com/geoserver/geofence/issues/225 ( 
https://github.com/geoserver/geofence/issues/225 )

In order to implement this feature, we need implemented:

* https://osgeo-org.atlassian.net/browse/GEOS-10681 ( 
https://osgeo-org.atlassian.net/browse/GEOS-10681 ) to be completed, in order 
to be able to get the info about currently active WPS processes
* https://github.com/geoserver/geofence/issues/226 ( 
https://github.com/geoserver/geofence/issues/226 ) : the GeoFence engine should 
be able to handle the new subfield field.

This ticket includes:

* modify the GeoFenceAccessManager in order to apply the constraints on the 
requested layer according to the caller processes chain
* modify the geofence-server module in order to handle the new field in the 
GUI, in the jaxb beans and in the REST operations.

( 
https://osgeo-org.atlassian.net/browse/GEOS-10682#add-comment?atlOrigin=eyJpIjoiYjYxZjQwNWY3ZjM1NDA1Yjk0NjFjYTU2YjRhZDQyMjIiLCJwIjoiaiJ9
 ) Add Comment ( 
https://osgeo-org.atlassian.net/browse/GEOS-10682#add-comment?atlOrigin=eyJpIjoiYjYxZjQwNWY3ZjM1NDA1Yjk0NjFjYTU2YjRhZDQyMjIiLCJwIjoiaiJ9
 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( 
https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail
 ) or iOS ( 
https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8
 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100207- 
sha1:ee9e30a )
_______________________________________________
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Reply via email to