Hi Niels,
during the meeting we discussed a possible way out, that is, have
GeoSolutions help with the GeoFence
integration and thus share the load.
The current main issue with GeoFence is that the user database is tightly
integrated with the rules engine,
making plugging it into GeoServer as a GWC style plugin a problem.
GeoSolutions would do the work of making this pluggable, and show a simple
integration module between GeoFence
and GeoServer, using GeoServer own users and a database in the data
directory, with no GUI, while you
could add the minimum of GUI rule editing, enough to achieve your goals.
It would still be better than the integrated security, and allow a road for
growing up with more complex rules
by exposing more and more of the GeoFence abilities in the editing UI.
We believe it's better than trying to improve the built-in security system,
as by 2.8.0 GeoSolutions has
plans to integrate GeoFence as an extension anyways, so there is a risk
that your work on the integrated security
will be for nothing (besides the considerations about how confusing the
ruleset you're proposing is,
a concern both me and Jody apparently share).
We're basically open to anticipate part of our work right now, even if we
have no pressing need for it,
to avoid duplication of work.
Cheers
Andrea
On Tue, Feb 3, 2015 at 9:47 AM, Niels Charlier <[email protected]> wrote:
> Hi Jody,
>
> That is fine by me.
> Unfortunately I can't make it to the meeting tonight if this is the time:
> http://www.timeanddate.com/worldclock/meetingdetails.html?year=2015&month=2&day=3&hour=17&min=30&sec=0&p1=256&p2=215&p3=101&p4=952
> because I have to be somewhere else. I could if it was a few hours earlier.
> :(
>
> Regards
> Niels
>
>
> On 02-02-15 23:11, Jody Garnett wrote:
>
> Niels are you available for the geoserver meeting tomorrow? I managed to
> catch up with the email thread.
>
> While I like the idea of extending the text-file approach (and you have
> been clever in figuring out a format) the result is quite confusing.
>
> I would also like to look at what is needed for GeoFence to become
> supported.
> --
> Jody
>
>
> On Tue, Jan 20, 2015 at 6:53 AM, Niels Charlier <[email protected]> wrote:
>
>> Hello Group,
>>
>> There has been a request to allow a basic combination of layer and
>> service security in the integrated geoserver security subsystem.
>> I have made a proposal to that end:
>>
>>
>> https://github.com/geoserver/geoserver/wiki/GSIP-125---Layer-with-Service-Security
>>
>> In summary, the proposal is to extend layer security to support
>> service/operation specificity and leave the existing service security
>> intact.
>> As you can see in the proposal there is still a discussion to be had as
>> to how certain rules will interact, but I have made a suggestion for
>> what I think is the most logical solution.
>>
>> Please offer me your feedback.
>>
>> Kind Regards
>> NIels
>>
>>
>> ------------------------------------------------------------------------------
>> New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
>> GigeNET is offering a free month of service with a new server in Ashburn.
>> Choose from 2 high performing configs, both with 100TB of bandwidth.
>> Higher redundancy.Lower latency.Increased capacity.Completely compliant.
>> http://p.sf.net/sfu/gigenet
>> _______________________________________________
>> Geoserver-devel mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>>
>
>
>
> --
>
> --
> Jody Garnett
> Technical Lead | Boundless <http://boundlessgeo.com/>
> [email protected] <http://mailto:[email protected]/>
> 877-673-6436
> @jodygarnett <https://twitter.com/jodygarnett>
>
> [image: http://boundlessgeo.com/] <http://boundlessgeo.com/>
>
>
>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming. The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media, is
> your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more. Take a
> look and join the conversation now. http://goparallel.sourceforge.net/
> _______________________________________________
> Geoserver-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>
>
--
==
GeoServer Professional Services from the experts! Visit
http://goo.gl/NWWaa2 for more information.
==
Ing. Andrea Aime
@geowolf
Technical Lead
GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549
http://www.geo-solutions.it
http://twitter.com/geosolutions_it
*AVVERTENZE AI SENSI DEL D.Lgs. 196/2003*
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il
loro utilizzo è consentito esclusivamente al destinatario del messaggio,
per le finalità indicate nel messaggio stesso. Qualora riceviate questo
messaggio senza esserne il destinatario, Vi preghiamo cortesemente di
darcene notizia via e-mail e di procedere alla distruzione del messaggio
stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso,
divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od
utilizzarlo per finalità diverse, costituisce comportamento contrario ai
principi dettati dal D.Lgs. 196/2003.
The information in this message and/or attachments, is intended solely for
the attention and use of the named addressee(s) and may be confidential or
proprietary in nature or covered by the provisions of privacy act
(Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection
Code).Any use not in accord with its purpose, any disclosure, reproduction,
copying, distribution, or either dissemination, either whole or partial, is
strictly forbidden except previous formal approval of the named
addressee(s). If you are not the intended recipient, please contact
immediately the sender by telephone, fax or e-mail and delete the
information in this message that has been received in error. The sender
does not give any warranty or accept liability as the content, accuracy or
completeness of sent messages and accepts no responsibility for changes
made after they were sent or for other risks which arise as a result of
e-mail transmission, viruses, etc.
-------------------------------------------------------
------------------------------------------------------------------------------
Dive into the World of Parallel Programming. The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Geoserver-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-devel
