Thank you for the recommendation, Luis.

/H.

On 2019-11-20 18:24, Luis Franco Vázquez wrote:
By mistake I didn't answered in the thread. Here are my two cents.

You should avoid opening ports in postgresql server by using ssh tunneling. My experience is that this kind of infrastructure can be slow for remote connections. Take a look to the offline editing plugin or maybe (it's only an idea) you can have slave postgresql servers in each building and some kind of synchronization with the master one.






‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
El miércoles, 20 de noviembre de 2019 14:15, Andreas Neumann <a.neum...@carto.net> escribió:

Hi Luigi and Alessandro,

thanks for the clarifications.

Quick other question: is it correct that the id MUST be exactly 7 characters Less than or more than 7 characters won't work? At least on my system saving the config is deactivated if it is less than 7 chars.

Thanks,

Andreas

On 2019-11-20 13:46, Alessandro Pasotti wrote:



On Wed, Nov 20, 2019 at 1:24 PM Andreas Neumann <a.neum...@carto.net <mailto:a.neum...@carto.net>> wrote:

    Hi,

    I wonder what is best practice to handle auth configs across
    several users for sharing of projects?

    Should we ask users to create the same auth-config ids/names to
    make projects interoperable, where each users would have
    different credentials, but share the auth-config id that is
    stored in the QGIS project file?

    Is this how we should do it? Otherwise users would end up with
    different auth-ids and then can't open QGIS files from their
    colleagues without a hassle ...

    Or are there better/alternative approaches?


One of the best ways we've used so far was to pre-define at the organization level a small set of authids, you are limited to 7 chars but that's not a big issue.

So, when creating project you will use one of the pre-defined auth ids, of course every user will have to use his own local QGIS auth DB (this is all handled transparently by the QGIS auth system) where he stores his own credentials.

If you share your project within your organization, as long as the user who receives the project has his credentials already sets for the given auth ids access will be granted automatically, if not he will be prompted to enter credentials and if he stores them in the QGIS auth local DB this will be required only for the first time.

This system gives the sysadmins full flexibility: individual credentials can be revoked/granted, no need to share any auth DB in any case.

Hope this helps.

    Andreas

    On 2019-11-20 13:14, Hernán De Angelis wrote:

        Interesting point, Luigi. Thank you!

        Hernán


        On 2019-11-20 12:58, Luigi Pirelli wrote:

            this is not an issue, Postgres support many auth systems
            most of them paired with the authentication system
            implemented in QGIS. Other problem is how to share
            (auth.db) credentials or security setting among
            different users.


            Luigi Pirelli

            
**************************************************************************************************
            * LinkedIn: https://www.linkedin.com/in/luigipirelli
            * Stackexchange:
            http://gis.stackexchange.com/users/19667/luigi-pirelli
            * GitHub: https://github.com/luipir
            * Book: Mastering QGIS3 - 3rd Edition
            
<https://www.packtpub.com/eu/application-development/mastering-geospatial-development-qgis-3x-third-edition>
            * Hire a team: http://www.qcooperative.net
            
**************************************************************************************************

            On Wed, 20 Nov 2019 at 11:53, Jan-Eric Oskarsson
            <jan-e...@kregis.se <mailto:jan-e...@kregis.se>> wrote:
            Hi Hernán!
            Maybe this comment is redundant but you have to set up
            a strong security to prevent hackers to hack your
            database and steal your data and cause damage.
            I hope uthat you already have thought about this issu!

            Kind Regards
            Jan-Eric

            -----Ursprungligt meddelande-----
            Från: Qgis-user <qgis-user-boun...@lists.osgeo.org
            <mailto:qgis-user-boun...@lists.osgeo.org>> För Hernán
            De Angelis
            Skickat: den 20 november 2019 11:10
            Till: qgis-user <qgis-user@lists.osgeo.org
            <mailto:qgis-user@lists.osgeo.org>>
            Ämne: [Qgis-user] Experiences using QGIS +
            PostgreSQL/PostGIS in a multiuser environment?

            Hello QGIS:ers

            I am evaluating setting up a server running
            PostgreSQL/PostGIS for use as data
            sharing/collaborating environment for spatial data. The
            user group may consist of up to 15 people, mostly using
            QGIS but one or two may use other software (non OS).
            Data is almost exclusively of vector type. The use is
            within a single organization.

            I understand some people in this list have experience
            with this kind of environment and would appreciate if
            any of you would share any useful experience,
            challenges, thought or things to watch out for. I
            understand basic management routines are critical (user
            management, user rights), as well as a sound backup and
            update strategy. I also understand that proper data
            management procedures have to be in place, like rules
            for table creation and eventual deletion, attribute
            selection, etc. But what else can go wrong with this
            kind of setup if not managed properly?
            Thoughts and experiences welcome!

            Best regards and thanks in advance

            Hernán





            _______________________________________________
            Qgis-user mailing list
            Qgis-user@lists.osgeo.org
            <mailto:Qgis-user@lists.osgeo.org>
            List info:
            https://lists.osgeo.org/mailman/listinfo/qgis-user
            Unsubscribe:
            https://lists.osgeo.org/mailman/listinfo/qgis-user

            _______________________________________________
            Qgis-user mailing list
            Qgis-user@lists.osgeo.org
            <mailto:Qgis-user@lists.osgeo.org>
            List info:
            https://lists.osgeo.org/mailman/listinfo/qgis-user
            Unsubscribe:
            https://lists.osgeo.org/mailman/listinfo/qgis-user


        _______________________________________________
        Qgis-user mailing list
        Qgis-user@lists.osgeo.org <mailto:Qgis-user@lists.osgeo.org>
        List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
        Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user


    _______________________________________________
    Qgis-user mailing list
    Qgis-user@lists.osgeo.org <mailto:Qgis-user@lists.osgeo.org>
    List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
    Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user



--

Alessandro Pasotti
w3: www.itopen.it <http://www.itopen.it>




_______________________________________________
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user
_______________________________________________
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user

Reply via email to