Hi Ronald Hoek,
Thank you very much for your reply. That is right: I need that a
htttp-basic authentication must be required by geoserver for a specific
user named <julierme>.
It is being very difficult for me to understand how to set a http-basic
authentication for an specific user <julierme> and disable the wms download
(raster) and wfs download (vector) for anonymous users. I tried the
following:
1 - Not allow download of wms (geotiff) and neither download of wfs
(shapefile, csv, etc) for anonymous users;
I tried disabling Anonymous authentication <anonymous> from all filters and
I ended up crashing geoserver.
2 - I created an user <julierme>
3 - I created a service role: wfs.*=ROLE_WFS
4 - I created a data role: topp.states.w=ROLE_Authentication
5 - Looking at the default filter in Filter Chains, basic and anonymous
are selected
I removed anonymous from selected and anonymous users still downloading
data (wfs (vector)/wms(raster))
So, I what I would like to do is to learn how:
1 - Disable download data wms (geotiff), but keeping view with openlayers
and disable download data wfs (shapefile, csv, etc) for anonymous users
2 - Allow download data (wms/raster) and (wfs/vector) only for a specific
user as <julierme> only after his authentication passing through http-basic
authentication request as showed in the picture attached to the previous
e-mail.
There is the Basic HTTP Authentication among Authentication Filters but I
do not know how to set it for a specific user in case of data download.
I appreciated your time.
Kind regards
Julierme
2018-04-30 5:37 GMT-03:00 Ronald Hoek - ComponentAgro B.V. <
ronald.h...@componentagro.nl>:
> Hi Julierme,
>
>
>
> I’m not sure what you are using to test/access the GeoServer (aka the
> dialog you showed in the screenshot), but I expect you just want some
> http-basic authentication.
>
>
>
> By default this is available in GeoServer (see ‘Security’ ->
> ‘Authentication’ -> ‘Authentication Filters’).
>
>
>
> To secure your data, then go the ‘Data’ part of the section ‘Security’
> section.
>
> There you can protect your data by linking adding the appropriated data
> rules.
>
>
>
> Info: http://docs.geoserver.org/latest/en/user/security/
> webadmin/data.html#security-webadmin-data
>
>
>
> Or protect your data based on the available services (as we did) by going
> to the ‘Service’ part op the ‘Security’ section.
>
>
>
> Info: http://docs.geoserver.org/latest/en/user/security/
> webadmin/services.html#security-webadmin-services
>
>
>
>
>
> NOTE!
>
> Don’t forget to remove the default rules, as these will allow everbody the
> use the data/services.
>
> But read the documentation carefully!
>
> Regards,
>
> Ronald Hoek
>
> Application Developer
>
>
>
> *Van:* Julierme Pinheiro <juliermeopensourcedevelo...@gmail.com>
> *Verzonden:* maandag 23 april 2018 17:37
> *Aan:* GeoServer Mailing List List <geoserver-users@lists.sourceforge.net>
> *Onderwerp:* [Geoserver-users] Geoserver WFS Authentication
>
>
>
> HI all,
>
> I have been hitting my head in a wall trying to figure out how I can
> create a web framework for Geoserver WFS Authentication as showed in
> attached.
>
> I tried to configure the Credentials From Request Headers Filters, but
> still no achieving my goal.
>
> So, I want to set up a user and password and only who has them can
> download raster (Geotiff) and vector data.
>
> Thank you for your time in advance.
>
> Julierme
>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Geoserver-users mailing list
Please make sure you read the following two resources before posting to this
list:
- Earning your support instead of buying it, but Ian Turton:
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines:
http://geoserver.org/comm/userlist-guidelines.html
If you want to request a feature or an improvement, also see this:
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users
