I don't know that GeoSolutions has updated this with info on the new security
subsystem, but this details some of the options available with an external
security model as applied through a proxy.
http://demo.geo-solutions.it/share/securing_geoserver.pdf
Available geo-specific proxies are available, although I don't have a more
current review than this:
https://smathermather.wordpress.com/2011/10/05/ogc-web-services-and-security/
In short, with some models, you can not only apply WFS vs WMS availability on a
per layer basis, but restrain according to geographic extents with respect to
WFS and WMS services.
Best,
Steve
[http://sig.cmparks.net/cmp-ms-90x122.png] Stephen V. Mather
GIS Manager
(216) 635-3243 (Work)
clevelandmetroparks.com<http://www.clemetparks.com>
________________________________
From: Phil Scadden [p.scad...@gns.cri.nz]
Sent: Monday, March 11, 2013 4:12 PM
To: geoserver-users@lists.sourceforge.net
Subject: Re: [Geoserver-users] Enabling only WMS on selected layers
Ivan, another option you may have is to take advantage of whatever your proxy
servers (if you use any), such as apache, nginx could offer and see if you
could disable wfs on a layer by its url pattern, etc.
I would look hard at using proxy service (ie block access to geoserver except
through proxy). The advantage of this, is that you could manipulate WFS
requests within the proxy - allowing say getFeature with maxFeatures set while
disabling say shapefile download or limiting the attributes served.
Notice: This email and any attachments are confidential. If received in error
please destroy and immediately notify us. Do not copy or disclose the contents.
------------------------------------------------------------------------------
Symantec Endpoint Protection 12 positioned as A LEADER in The Forrester
Wave(TM): Endpoint Security, Q1 2013 and "remains a good choice" in the
endpoint security space. For insight on selecting the right partner to
tackle endpoint security challenges, access the full report.
http://p.sf.net/sfu/symantec-dev2dev
_______________________________________________
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users
