Hello everyone, before opening a jira I wanted to submit this to the
community

I have a security->data rule:

topp.*.r=ADMIN
CatalogMode=CHALLENGE

VectorLayer XXXX with TIME Dimension

The getCapabilities request require authentication even if the catalog mode
is set to CHALLENGE.

I investigated a bit and i see in the SecurityCatalogImpl

line 727

* *// for challenge mode we agree to show freely only the metadata, every
 // other access will trigger a security exception



is correct or is there a problem?

I test it in 2.2.x branch

Thanks,

Regards,

-- 
Francesco Izzi
CNR - IMAA
geoSDI
Direzione Tecnologie e Sviluppo

C.da S. Loja
85050  Tito Scalo - POTENZA (PZ)
Italia

phone:  +39 0971427305
fax:      +39 0971 427271
mob:    +39 3203126609
mail:     [email protected]
skype:  neofx8080

web:     http://www.geosdi.org
------------------------------------------------------------------------------
Monitor your physical, virtual and cloud infrastructure from a single
web console. Get in-depth insight into apps, servers, databases, vmware,
SAP, cloud infrastructure, etc. Download 30-day Free Trial.
Pricing starts from $795 for 25 servers or applications!
http://p.sf.net/sfu/zoho_dev2dev_nov
_______________________________________________
Geoserver-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Reply via email to