Hello.

I am testing GeoServer with a client I am developing and I have a question
regarding security.
According to the documentation, setting the Catalog mode to Challenge
should expose the layers and make the server send a 401 error in case the
credentials are not sent. This is not what is happening with an insert or
update transactions. Only the delete transaction sends a 401. Both insert
and update send a 200 with an ExceptionReport xml. This is problematic
because it makes it hard to develop a client that will request
authentication. Especially because the exception code is simply a
"InvalidParameterValue".

Is this a design decision or is it a bug?

Kind regards,

-- 
Met vriendelijke groet,

João Gouveia
Software Engineer

  <http://www.horus.nu/>

[email protected]
Horus View and Explore B.V.
+31 (0)50 309 62 14 | www.horus.nu
Verbindingsweg 18 | 9781 DA  Bedum | NL
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Geoserver-users mailing list

Please make sure you read the following two resources before posting to this 
list:
- Earning your support instead of buying it, but Ian Turton: 
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines: 
http://geoserver.org/comm/userlist-guidelines.html

[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Reply via email to