Hello everyone,

I am currently having a look at what needs to happen to implement some 
additional features and improvements in the security system.

The first thing is making rules that combine layers and services, which 
is now impossible.
This seems like a pretty straight-forward improvement to me, but it will 
require quite some changes in the main module. A discussion with the 
people involved is going to be necessary. I was wondering though if 
there are any unexpected issues or loopholes about this I should be 
aware of? Perhaps a reason why people chose not to implement it earlier?

The other thing is that apparently there is a security leak through the 
GeoWebCache. An integration of geoserver security with GWC is needed. 
There is already a JIRA issue about this:
http://jira.codehaus.org/browse/GEOS-4217
It seems that people might have worked on this already or looked in to 
it in the past, so I would like to get in touch with these people, or 
any other people who need to be involved, if possible.

Kind Regards
Niels

------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Geoserver-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Reply via email to