Thanks for that Ian,

I will make sure to read the blog post when it is out 😊

Paul

From: Ian Turton <ijtur...@gmail.com>
Sent: 23 February 2023 10:33
To: Paul Wittle <paul.wit...@dorsetcouncil.gov.uk>
Cc: geoserver-users@lists.sourceforge.net
Subject: Re: [Geoserver-users] Question about administrative access



On Thu, 23 Feb 2023 at 09:54, Paul Wittle via Geoserver-users 
<geoserver-users@lists.sourceforge.net<mailto:geoserver-users@lists.sourceforge.net>>
 wrote:
Morning,

I’ve been looking at the security in GeoServer and I know this is quite a 
complex area. I can see that you can assign users / roles the ADMIN permission 
in both the out of the box GeoServer and also within the GeoFence extension but 
this always seems to be tied to a workspace.

Is there a way to give a user admin rights to manage users without giving them 
instant access to all the other functions in the admin UI?


I'm not sure if it's possible within GeoServer, maybe with GeoFence? But we 
(Astun) have recently done something similar using and external LDAP service 
and KeyCloak which handles the user management outside of GeoServer which 
should allow you to do what you want. I've submitted a talk about this for 
FOSS4G and am planning on writing it up as a blog post when I get some spare 
time.

Ian
This e-mail and any files transmitted with it are intended solely for the use 
of the individual or entity to whom they are addressed. It may contain 
unclassified but sensitive or protectively marked material and should be 
handled accordingly. Unless you are the named addressee (or authorised to 
receive it for the addressee) you may not copy or use it, or disclose it to 
anyone else. If you have received this transmission in error please notify the 
sender immediately. All traffic may be subject to recording and/or monitoring 
in accordance with relevant legislation. Any views expressed in this message 
are those of the individual sender, except where the sender specifies and with 
authority, states them to be the views of Dorset Council. Dorset Council does 
not accept service of documents by fax or other electronic means. Virus 
checking: Whilst all reasonable steps have been taken to ensure that this 
electronic communication and its attachments whether encoded, encrypted or 
otherwise supplied are free from computer viruses, Dorset Council accepts no 
liability in respect of any loss, cost, damage or expense suffered as a result 
of accessing this message or any of its attachments. For information on how 
Dorset Council processes your information, please see 
www.dorsetcouncil.gov.uk/data-protection
_______________________________________________
Geoserver-users mailing list

Please make sure you read the following two resources before posting to this 
list:
- Earning your support instead of buying it, but Ian Turton: 
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines: 
http://geoserver.org/comm/userlist-guidelines.html

If you want to request a feature or an improvement, also see this: 
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer


Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Reply via email to