Will do. Could find the gap but PHP is new
On Dec 2, 2015 10:37 PM, "Jackie Ng" <jumpinjac...@gmail.com> wrote:

> The whitelisting feature is so that Mr. Anonymous MapGuide user account
> doesn't have unfettered feature/resource service API access to *all*
> resources in your site repository.
>
> Runtime map creation does not fall under the feature service or resource
> service classification of APIs, so whitelisting doesn't cover it.
>
> As to whether createmap should be guarded. Yes it probably should, even if
> you send anonymous credentials to it (if it isn't, it's an oversight on my
> part and you should probably file a github issue on it).
>
> - Jackie
>
>
>
> --
> View this message in context:
> http://osgeo-org.1560.x6.nabble.com/mapguide-rest-1-0-RC3-tp5239551p5239754.html
> Sent from the MapGuide Users mailing list archive at Nabble.com.
> _______________________________________________
> mapguide-users mailing list
> mapguide-users@lists.osgeo.org
> http://lists.osgeo.org/mailman/listinfo/mapguide-users
_______________________________________________
mapguide-users mailing list
mapguide-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapguide-users

Reply via email to