Re: [josm-dev] WMS requiring an EULA acceptance
Again, the idea is not to build up a fortress. It is well known that if someone really want to catch the images, he will be able to do so anyway. The request to show and accept the uela is coming from the jurists, I cannot change that. What I would like to know is if it is possible and how I could do it in JOSM/WMS plugin without disturbing the main stream. Solution requiring no modification of JOSM or WMS plugin could be that the URL will require some parameter, like http://wms-server?SERVICE=WMSREQUEST=GetMapeula_check=something Value for that parameter will not be included in presets and for that JOSM to work, user will have to browse to the site with EULA, agree to the EULA and after that the site will tell him what to put in place of the parameter, like eula_check=p45gG0h5w (or perhaps it can tell him entire WMS URL, includnig the parameter) Requests without correct value of eula_check parameter will be denied on the WMS server side ans since the only way to get the parameter will be by reading and accepting EULA - problem solved. Perhaps also add clause to disallow telling value of the parameter to other people if it is already not in the EULA. Then it should be completely safe (from lawyers point of view) Martin ___ josm-dev mailing list josm-dev@openstreetmap.org http://lists.openstreetmap.org/listinfo/josm-dev
[josm-dev] WMS requiring an EULA acceptance
Dear josm-devs, In my country, we have a commercial imagery supplier which is ready to open its images but only for the OSM project (licencing issues fixed). For that, they will set-up a WMS for a limited coverage during an experimental period and want to check that only allowed clients are accessing the data by checking the user-agent (on which only the OSM editors could be accepted and others rejected of course). The main concern is about a special handling of the WMS. They want that a contributor using the WMS the first time shall read and accept an EULA (End User License Agreement). Again this is just to inform people that they are only allowed to use the imagery for OSM and nothing else. Of course, the whole process can be bypassed by anyone who really want to access the WMS but this is a demand from the lawyers. The EULA would be available in two languages but could be extended later. Then I'm asking you to check if this demand is possible and how it could be solved. I don't want to fork the WMS plugin just for that, so my idea is that the plugin could be modified in a way that the special WMS URI could be identified as such in the Java code (hardcoded) and would raise the EULA acceptance dialog automatically the first time (stored somewhere is different languages). I could implement that myself but I would have your feedback first to see if this is the right way to go. Pieren ___ josm-dev mailing list josm-...@openstreetmap.org http://lists.openstreetmap.org/listinfo/josm-dev
Re: [josm-dev] WMS requiring an EULA acceptance
Pieren wrote: It could be a WMS customization (blocking the images delivery if the user-agent is not in the white list), I don't know this part well enough to answer. Matthias is right. You cannot rely on the client program. It is easy to change the user agent. see http://chrispederick.com/work/user-agent-switcher/ Matthias Meißer wrote: so best would be to let mappers somewhat register by mail/osm PM/.. so they can check who is online. During this step it is necessary to accept the EULA. Pieren wrote: The things you suggest have been studied in details with their lawyers and they found this solution as a compromise (no user accounts to manage, simplicity, etc). Just click 'OK' on the text asking you to use the imagery for OSM only. Sounds reasonable. With this simplicity they won't get any security. As I already said you cannot rely on the client program. I saw in the WMS plugin that you can specify cookies. (I don't know if it works correct.) Maybe the user can go to their website to accept the license. The user will get a string that he has to copy and paste to his WMS configuration as a cookie specification. The WMS server can reject requests without a known cookie. (But without other checks some cookies will sooner or later be known to everyone.) Or the website can create an individual URL after accepting the license. The user can select the WMS - rectified image option and paste the URL. (similar security problems here, maybe the URL can be restricted to a specific IP address and could expire when unused for some time...) Bodo -- View this message in context: http://gis.638310.n2.nabble.com/WMS-requiring-an-EULA-acceptance-tp5416309p5416706.html Sent from the JOSM Development mailing list archive at Nabble.com. ___ josm-dev mailing list josm-dev@openstreetmap.org http://lists.openstreetmap.org/listinfo/josm-dev
Re: [josm-dev] WMS requiring an EULA acceptance
Pieren wrote: Dear josm-devs, In my country, we have a commercial imagery supplier which is ready to open its images but only for the OSM project (licencing issues fixed). For that, they will set-up a WMS for a limited coverage during an experimental period and want to check that only allowed clients are accessing the data by checking the user-agent (on which only the OSM editors could be accepted and others rejected of course). The main concern is about a special handling of the WMS. They want that a contributor using the WMS the first time shall read and accept an EULA (End User License Agreement). Again this is just to inform people that they are only allowed to use the imagery for OSM and nothing else. Of course, the whole process can be bypassed by anyone who really want to access the WMS but this is a demand from the lawyers. The EULA would be available in two languages but could be extended later. Then I'm asking you to check if this demand is possible and how it could be solved. I don't want to fork the WMS plugin just for that, so my idea is that the plugin could be modified in a way that the special WMS URI could be identified as such in the Java code (hardcoded) and would raise the EULA acceptance dialog automatically the first time (stored somewhere is different languages). I could implement that myself but I would have your feedback first to see if this is the right way to go. Generally, it should be possible to include something like this in the main wms plugin. Hardcoding some URLs might also be acceptable (but I don't think it is needed). There are always older versions of the wms plugin out there in use. These older versions would not know about this blacklist and would simply ignore the EULA enforcement. You might want to demand a certain parameter in the URL (like ...user=openstreetmap) just to sort out the older clients. When reading the list of defaults [1], wms plugin ignores each line that has more than 2 semicolons in it. You can exploit this, to create your own custom format. E.g. the first string could be the name of the custom format EULA-1.0, followed by the necessary parameters. When extending the plugin, make it ignore lines with unknown format. I would imagine it like this: * You open josm preference and select the entry from the defaults. * A message box pops up, informing you that it is necessary to accept an EULA for using the service. * If you click OK, it would download the EULA text from an external website (possibly translated) and present it in another dialog. * Save in the preferences that EULA has been accepted. [1] http://svn.openstreetmap.org/applications/editors/josm/plugins/wmsplugin/sources.cfg Sebastian ___ josm-dev mailing list josm-dev@openstreetmap.org http://lists.openstreetmap.org/listinfo/josm-dev
Re: [josm-dev] WMS requiring an EULA acceptance
On Thu, Aug 12, 2010 at 5:56 PM, Bodo Meissner b...@bodo-m.de wrote: Matthias is right. You cannot rely on the client program. It is easy to change the user agent. see http://chrispederick.com/work/user-agent-switcher/ Again, the idea is not to build up a fortress. It is well known that if someone really want to catch the images, he will be able to do so anyway. The request to show and accept the uela is coming from the jurists, I cannot change that. What I would like to know is if it is possible and how I could do it in JOSM/WMS plugin without disturbing the main stream. Pieren ___ josm-dev mailing list josm-dev@openstreetmap.org http://lists.openstreetmap.org/listinfo/josm-dev
Re: [josm-dev] WMS requiring an EULA acceptance
On Thu, Aug 12, 2010 at 6:20 PM, Sebastian Klein basti...@googlemail.comwrote: I would imagine it like this: * You open josm preference and select the entry from the defaults. * A message box pops up, informing you that it is necessary to accept an EULA for using the service. * If you click OK, it would download the EULA text from an external website (possibly translated) and present it in another dialog. * Save in the preferences that EULA has been accepted. Sounds reasonable for me. If nobody is against this proposal, I will look to implement it in the plugin. Thank you for your support, Pieren ___ josm-dev mailing list josm-dev@openstreetmap.org http://lists.openstreetmap.org/listinfo/josm-dev