Hi Andrea!

My Data security has these rules:

 
*.*.r<http://neotec01.rc.unesp.br:8080/geoserver/web/?wicket:bookmarkablePage=:org.geoserver.security.web.data.DataSecurityPage#>
*  
*.*.w<http://neotec01.rc.unesp.br:8080/geoserver/web/?wicket:bookmarkablePage=:org.geoserver.security.web.data.DataSecurityPage#>
*  
mm_50.*.r<http://neotec01.rc.unesp.br:8080/geoserver/web/?wicket:bookmarkablePage=:org.geoserver.security.web.data.DataSecurityPage#>
USUARIO,ADMINISTRADOR

and the catalog mode is HIDE.

The "common" workspace and the common:IBGE store are not protected... the
ws is listed and the store is not.

As you said, the mm_50 workspace shouldn't be visible by WPS because of the
third rule, right?

What about the IBGE store? Maybe because it's type is WMS?

Anyway, if WPS can't access restricted layers, it's really bad for me...
for a while, I'll have to send only text parameters...

Is there a plan to change this wps restriction? Maybe I could try to
help...(if I'm able to =P)


Rodrigo C. Antonialli
======================================
Rio Claro - SP - Brasil
LinkedIn: http://www.linkedin.com/in/rcaprofile
Contato:  (19) 8136-2347
              rcantonia...@gmail.com
              Skype: rc_antonialli


On Tue, Mar 5, 2013 at 4:17 AM, Andrea Aime <andrea.a...@geo-solutions.it>wrote:

> On Tue, Mar 5, 2013 at 12:07 AM, Rodrigo Antonialli <
> rcantonia...@gmail.com> wrote:
>
>> Hi everyone!
>>
>> Today I was testing access to geoserver catalog in a WPS process, but I
>> noticed that only some of my Workspaces and DataStores are listed.
>>
>
>  Are the stores and workspaces not listed under any security control?
> As it stands now WPS cannot access any secured layer, even if the user
> issuing the command theoretically has
> rigths, because of a tech issue (the authentication token is kept in a
> thread local in the request thread, but the
> process then runs in a separate thread pool and does not get to see it)
>
> Cheers
> Andrea
>
> --
> ==
> Our support, Your Success! Visit http://opensdi.geo-solutions.it for more
> information.
> ==
>
> Ing. Andrea Aime
> @geowolf
> Technical Lead
>
> GeoSolutions S.A.S.
> Via Poggio alle Viti 1187
> 55054  Massarosa (LU)
> Italy
> phone: +39 0584 962313
> fax: +39 0584 1660272
> mob: +39  339 8844549
>
> http://www.geo-solutions.it
> http://twitter.com/geosolutions_it
>
> -------------------------------------------------------
>
------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_feb
_______________________________________________
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Reply via email to