David Blasby ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5850b0e7724a0e726439a4 ) *created* an issue
GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiNjE1OWQ0ZDk0ODMwNDk1MWI0YTg0OWU2ZDY0YmM3ZGMiLCJwIjoiaiJ9 ) / Bug ( https://osgeo-org.atlassian.net/browse/GEOS-10715?atlOrigin=eyJpIjoiNjE1OWQ0ZDk0ODMwNDk1MWI0YTg0OWU2ZDY0YmM3ZGMiLCJwIjoiaiJ9 ) GEOS-10715 ( https://osgeo-org.atlassian.net/browse/GEOS-10715?atlOrigin=eyJpIjoiNjE1OWQ0ZDk0ODMwNDk1MWI0YTg0OWU2ZDY0YmM3ZGMiLCJwIjoiaiJ9 ) Workspace Filter for PublishedInfo doesn't work for LayerGroups ( https://osgeo-org.atlassian.net/browse/GEOS-10715?atlOrigin=eyJpIjoiNjE1OWQ0ZDk0ODMwNDk1MWI0YTg0OWU2ZDY0YmM3ZGMiLCJwIjoiaiJ9 ) Issue Type: Bug Assignee: Unassigned Created: 20/Oct/22 6:43 PM Priority: Medium Reporter: David Blasby ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5850b0e7724a0e726439a4 ) To reproduce - a) create a user with only access to NE workspace b) got to GS Homepage or Layer Preview c) you would expect to see 5 “layers” - 4 real layers and one LayerGroup (“world”) d) You don’t see the “world” LayerGroup Underlying cause is the security filter for the catalog uses layer-specific check ([ resource.store.workspace.name = topp ]) that doesn’t work on a layerGroup. Solution - use a filter that handles both LayerGroup and Layer - “[[ workspace.name = topp ] OR [ resource.store.workspace.name = topp ]]” NOTE: one of the test cases (SecureCatalogImplTest#testSecurityFilterComplex) relies on the incorrect behaviour. ( https://osgeo-org.atlassian.net/browse/GEOS-10715#add-comment?atlOrigin=eyJpIjoiNjE1OWQ0ZDk0ODMwNDk1MWI0YTg0OWU2ZDY0YmM3ZGMiLCJwIjoiaiJ9 ) Add Comment ( https://osgeo-org.atlassian.net/browse/GEOS-10715#add-comment?atlOrigin=eyJpIjoiNjE1OWQ0ZDk0ODMwNDk1MWI0YTg0OWU2ZDY0YmM3ZGMiLCJwIjoiaiJ9 ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100209- sha1:392b984 )
_______________________________________________ Geoserver-devel mailing list Geoserver-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-devel
