On Thu, Mar 22, 2012 at 2:34 AM, Firas El Khalil <firas.kha...@upf.pf>wrote:
> Hi,
>
> My name is Firas El Khalil, I'm a PhD candidate at the University of
> French Polynesia, and currently working on geographic inforlation
> security.
>
> Excuse me if I'm posting at the wrong mailing list, but I really
> couldn't find any other place to interact with developers. If there
> exists another place to address my problem please point me to it :)
>
> I am going for a fast implementation of an access control model for
> geographic information (and that's something that I didn't personally
> worked on, but we need a prototype in the lab asap), but the problem is
> I can't get to understand how would I implement it with geoserver. The
> documentation didn't help me a lot.
>
> So first of all, let me explain what I have in mind:
> -I want to use OpenLayers to access my geroserver (server, hereafter).
> -The request should be
> -intercepted by my module
> -forwarded for the server
> -The server's response is intercepted by my module
> -My module will:
> -apply various access control policies on data intercepted from the
> request interception phase
> -the identify identify actions to be taken on data returned by the
> response interception phase
> -apply modifications
> -return the result to OpenLayers
>
> I will be working mainly on vector data.
>
> Maybe what I have is completely inefficient or maybe unattainable with
> geoserver. I hope you've got the idea.
>
> Keep in mind that it's a prototype and not an integration solution, so
> I'm looking for something relatively simple. Anyhow, I'm open to all
> suggestions.
>
You should probably look at this paper:
http://demo.geo-solutions.it/share/securing_geoserver.pdf
and I guess what you are trying to do is already available as open source
(both in the proxy version and the integrated version, if you get the source
version, the released version I think it's just a proxy):
http://istgeo.ist.supsi.ch/site/projects/geoshield
Here you can find a description of a bit more sophisticated integrated
security
subsystem too, whose sources are not available though:
http://geo-solutions.blogspot.it/2011/05/preview-georepository-advanced.html
Cheers
Andrea
--
-------------------------------------------------------
Ing. Andrea Aime
GeoSolutions S.A.S.
Tech lead
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 962313
mob: +39 339 8844549
http://www.geo-solutions.it
http://geo-solutions.blogspot.com/
http://www.youtube.com/user/GeoSolutionsIT
http://www.linkedin.com/in/andreaaime
http://twitter.com/geowolf
-------------------------------------------------------
------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here
http://p.sf.net/sfu/sfd2d-msazure
_______________________________________________
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel
