Re: [Geoserver-devel] Security Restrictions added for restlet modules.

2008-05-28 Thread David Winslow
After a discussion at May 27's GeoServer meeting, it was decided that since REST extensions may allow access to resources beyond those exposed in the configuration API, having a separate configuration system for REST resource permissions is both appropriate and useful. I'll work on making thes

Re: [Geoserver-devel] Security Restrictions added for restlet modules.

2008-05-28 Thread David Winslow
I'm not familiar with eXist; however, it looks like there are a few reasons why it wouldn't work as well as custom Restlets for our needs. * Not all of the resources we are exposing correlate 1:1 to XML documents in the Data directory. For example, modifying featuretype configura

Re: [Geoserver-devel] Security Restrictions added for restlet modules.

2008-05-28 Thread Chris Thatcher
David Winslow wrote: Andrea Aime wrote: David Winslow ha scritto: Hey all, just a heads-up that I caught and fixed a typo in the main security context. If you're using the rest module in community, updating will cause your application to require authentication for non-GET requests.