On 20/03/12 10:04, Phil Scadden wrote:
> Ideally I would like to control access to data served by geoserver from
> my application. Its fine for geoserver to serve image and WFS queries
> filtered through the application. However, I am not so happy about a
> user able to say download a layer as shapefile with just the appropriate
> URL.

Why is that, Phil? As far as I know, it will not be your original 
shapefile, rather a new shapefile encoded with no more data than the WFS 
response. Try it. I will be rather surprised if this was not the case.

Nothing can stop the user from obtaining all your WFS data in GML and 
then converting it to a shapefile.

> What is the best way to implement this kind of security?

I do not think this can be done on a per-layer basis. But again, why 
would you want to? I can't see the use-case.

Kind regards,

-- 
Ben Caradoc-Davies <[email protected]>
Software Engineer
CSIRO Earth Science and Resource Engineering
Australian Resources Research Centre

------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here 
http://p.sf.net/sfu/sfd2d-msazure
_______________________________________________
Geoserver-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Reply via email to