Re: [josm-dev] WMS requiring an EULA acceptance

2010-08-14 Thread MP
 Again, the idea is not to build up a fortress. It is well known that if
  someone really want to catch the images, he will be able to do so anyway.
  The request to show and accept the uela is coming from the jurists, I cannot
  change that. What I would like to know is if it is possible and how I could
  do it in JOSM/WMS plugin without disturbing the main stream.

Solution requiring no modification of JOSM or WMS plugin could be that
the URL will require some parameter, like
http://wms-server?SERVICE=WMSREQUEST=GetMapeula_check=something

Value for that parameter will not be included in presets and for that
JOSM to work, user will have to browse to the site with EULA, agree to
the EULA and after that the site will tell him what to put in place of
the parameter, like eula_check=p45gG0h5w
(or perhaps it can tell him entire WMS URL, includnig the parameter)

Requests without correct value of eula_check parameter will be denied
on the WMS server side ans since the only way to get the parameter
will be by reading and accepting EULA - problem solved. Perhaps also
add clause to disallow telling value of the parameter to other people
if it is already not in the EULA. Then it should be completely safe
(from lawyers point of view)

Martin

___
josm-dev mailing list
josm-dev@openstreetmap.org
http://lists.openstreetmap.org/listinfo/josm-dev


Re: [josm-dev] WMS requiring an EULA acceptance

2010-08-12 Thread Bodo Meissner


Pieren wrote:
 
 It could be a WMS customization (blocking the
 images delivery if the user-agent is not in the white list), I don't know
 this part well enough to answer.
 

Matthias is right. You cannot rely on the client program. It is easy to
change the user agent. see
http://chrispederick.com/work/user-agent-switcher/


Matthias Meißer wrote:
 
 so best would be to let mappers somewhat register by mail/osm PM/.. so
 they
 can check who is online. During this step it is necessary to accept the
 EULA.
 


Pieren wrote:
 
 The things you suggest have been
 studied in details with their lawyers and they found this solution as a
 compromise (no user accounts to manage, simplicity, etc). Just click 'OK'
 on
 the text asking you to use the imagery for OSM only. Sounds reasonable.
 

With this simplicity they won't get any security.
As I already said you cannot rely on the client program.

I saw in the WMS plugin that you can specify cookies. (I don't know if it
works correct.)
Maybe the user can go to their website to accept the license. The user will
get a string that he has to copy and paste to his WMS configuration as a
cookie specification. The WMS server can reject requests without a known
cookie.
(But without other checks some cookies will sooner or later be known to
everyone.)

Or the website can create an individual URL after accepting the license. The
user can select the WMS - rectified image option and paste the URL.
(similar security problems here, maybe the URL can be restricted to a
specific IP address and could expire when unused for some time...)


Bodo
-- 
View this message in context: 
http://gis.638310.n2.nabble.com/WMS-requiring-an-EULA-acceptance-tp5416309p5416706.html
Sent from the JOSM Development mailing list archive at Nabble.com.

___
josm-dev mailing list
josm-dev@openstreetmap.org
http://lists.openstreetmap.org/listinfo/josm-dev


Re: [josm-dev] WMS requiring an EULA acceptance

2010-08-12 Thread Sebastian Klein

Pieren wrote:

Dear josm-devs,

In my country, we have a commercial imagery supplier which is ready to open
its images but only for the OSM project (licencing issues fixed). For that,
they will set-up a WMS for a limited coverage during an experimental period
and want to check that only allowed clients are accessing the data by
checking the user-agent (on which only the OSM editors could be accepted and
others rejected of course).
The main concern is about a special handling of the WMS. They want that a
contributor using the WMS the first time shall read and accept an EULA (End
User License Agreement). Again this is just to inform people that they are
only allowed to use the imagery for OSM and nothing else. Of course, the
whole process can be bypassed by anyone who really want to access the WMS
but this is a demand from the lawyers. The EULA would be available in two
languages but could be extended later.
Then I'm asking you to check if this demand is possible and how it could be
solved. I don't want to fork the WMS plugin just for that, so my idea is
that the plugin could be modified in a way that the special WMS URI could be
identified as such in the Java code (hardcoded) and would raise the EULA
acceptance dialog automatically the first time (stored somewhere is
different languages). I could implement that myself but I would have your
feedback first to see if this is the right way to go.


Generally, it should be possible to include something like this in the 
main wms plugin. Hardcoding some URLs might also be acceptable (but I 
don't think it is needed).


There are always older versions of the wms plugin out there in use. 
These older versions would not know about this blacklist and would 
simply ignore the EULA enforcement. You might want to demand a certain 
parameter in the URL (like ...user=openstreetmap) just to sort out the 
older clients.


When reading the list of defaults [1], wms plugin ignores each line that 
has more than 2 semicolons in it. You can exploit this, to create your 
own custom format. E.g. the first string could be the name of the custom 
format EULA-1.0, followed by the necessary parameters. When extending 
the plugin, make it ignore lines with unknown format.


I would imagine it like this:
* You open josm preference and select the entry from the defaults.
* A message box pops up, informing you that it is necessary to accept an 
EULA for using the service.
* If you click OK, it would download the EULA text from an external 
website (possibly translated) and present it in another dialog.

* Save in the preferences that EULA has been accepted.

[1] 
http://svn.openstreetmap.org/applications/editors/josm/plugins/wmsplugin/sources.cfg


Sebastian

___
josm-dev mailing list
josm-dev@openstreetmap.org
http://lists.openstreetmap.org/listinfo/josm-dev


Re: [josm-dev] WMS requiring an EULA acceptance

2010-08-12 Thread Pieren
On Thu, Aug 12, 2010 at 5:56 PM, Bodo Meissner b...@bodo-m.de wrote:

 Matthias is right. You cannot rely on the client program. It is easy to
 change the user agent. see
 http://chrispederick.com/work/user-agent-switcher/


Again, the idea is not to build up a fortress. It is well known that if
someone really want to catch the images, he will be able to do so anyway.
The request to show and accept the uela is coming from the jurists, I cannot
change that. What I would like to know is if it is possible and how I could
do it in JOSM/WMS plugin without disturbing the main stream.

Pieren
___
josm-dev mailing list
josm-dev@openstreetmap.org
http://lists.openstreetmap.org/listinfo/josm-dev


Re: [josm-dev] WMS requiring an EULA acceptance

2010-08-12 Thread Pieren
On Thu, Aug 12, 2010 at 6:20 PM, Sebastian Klein basti...@googlemail.comwrote:

 I would imagine it like this:
 * You open josm preference and select the entry from the defaults.
 * A message box pops up, informing you that it is necessary to accept an
 EULA for using the service.
 * If you click OK, it would download the EULA text from an external
 website (possibly translated) and present it in another dialog.
 * Save in the preferences that EULA has been accepted.


Sounds reasonable for me. If nobody is against this proposal, I will look to
implement it in the plugin.

Thank you for your support,
Pieren
___
josm-dev mailing list
josm-dev@openstreetmap.org
http://lists.openstreetmap.org/listinfo/josm-dev