Re: [QGIS-Developer] Reporting security related issues ?

[Nyall Dawson]

/me Raises hand also

Nyall
___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [QGIS-Developer] Reporting security related issues ?

[Larry Shaffer]

Hi Richard, All,

I would like to be added as well.

Regards,

Larry Shaffer
Dakota Cartography
Black Hills, South Dakota


On Thu, Feb 13, 2020 at 5:23 AM Richard Duivenvoorde 
wrote:

> On 13/02/2020 13.08, security minded wrote:
> > Hello,
> >
> > I've tried to email secur...@qgis.org  but got
> > an error message: "We're writing to let you know that the group you
> > tried to contact (security) may not exist, or you may not have
> > permission to post messages to the group"
> >
>
> Ouch, sorry, me bad.
>
> Google settings are hard for me..
>
> Can you please try again?
>
> Regards,
>
> Richard Duivenvoorde
> ___
> QGIS-Developer mailing list
> QGIS-Developer@lists.osgeo.org
> List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer
___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [QGIS-Developer] WMS loaded in qgis desktop, not in server

[Paolo Cavallini]

Hi Jeff,
I regularly use WMS services, and this is the first time I hit this
different behaviour between server and desktop, so I think this is
related to that specific server.
Cheers.

Il 13/02/20 16:19, Jeff McKenna ha scritto:
> On 2020-02-13 11:00 a.m., Paolo Cavallini wrote:
>>
>> Indeed, adding
>> ?SERVICE=WMS=GetCapabilities
>> returns valid results.
>> curl from the same server downloads a valid image.
>> Unclear therefore why the layers are shown in desktop and not in the
>> server. Could it be that they do not allow wms cascading?
>> I worked around this by taking data directly from wms, without passing
>> from qgis server, but it would be nice to understand this behaviour.
>> Thanks Richard for the plugin, very useful.
>> Cheers.
>>
> 
> Paolo does the same issue occur when you leverage my server instead,
> inside your application? If so I can check my Apache logs when you hit
> it, to see what request your application is sending to MapServer.
> 
> -jeff
> 
> 

-- 
Paolo Cavallini - www.faunalia.eu
QGIS.ORG Chair:
http://planet.qgis.org/planet/user/28/tag/qgis%20board/
___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [QGIS-Developer] WMS loaded in qgis desktop, not in server

[Jeff McKenna]

On 2020-02-13 11:00 a.m., Paolo Cavallini wrote:


Indeed, adding
?SERVICE=WMS=GetCapabilities
returns valid results.
curl from the same server downloads a valid image.
Unclear therefore why the layers are shown in desktop and not in the
server. Could it be that they do not allow wms cascading?
I worked around this by taking data directly from wms, without passing
from qgis server, but it would be nice to understand this behaviour.
Thanks Richard for the plugin, very useful.
Cheers.



Paolo does the same issue occur when you leverage my server instead, 
inside your application? If so I can check my Apache logs when you hit 
it, to see what request your application is sending to MapServer.


-jeff


--
Jeff McKenna
MapServer Consulting and Training Services
https://gatewaygeomatics.com/
___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [QGIS-Developer] WMS loaded in qgis desktop, not in server

[Paolo Cavallini]

Hi all,

Il 13/02/20 14:38, Richard Duivenvoorde ha scritto:
> 
> 
> On 13/02/2020 14.22, Jeff McKenna wrote:
>> Hi Paolo,
>>
>> It would be good to get the exact request that your server is sending to
>> MapServer, to debug this. (maybe using Fiddler, as described in the
>> steps I've recorded at
>> https://github.com/mapserver/mapserver/wiki/Get-the-Raw-WMS-Request-Generated-by-QGIS
>> )
> 
> @Jeff: my I plug this plugin:
> https://plugins.qgis.org/plugins/qgisnetworklogger/
> to view wfs/wms requests from within QGIS Desktop? You can see all
> requests en response info, AND replay in browser or curl
> 
> @Paolo: the error you see is when Minnesota mapserver is not receiving
> the full url (including the =mymapfile. So looks to me like QGIS
> server is handling the server-url different then QGIS desktop.
> I would try to connect to a local mapserver and log the apache requests
> there?

Indeed, adding
?SERVICE=WMS=GetCapabilities
returns valid results.
curl from the same server downloads a valid image.
Unclear therefore why the layers are shown in desktop and not in the
server. Could it be that they do not allow wms cascading?
I worked around this by taking data directly from wms, without passing
from qgis server, but it would be nice to understand this behaviour.
Thanks Richard for the plugin, very useful.
Cheers.
-- 
Paolo Cavallini - www.faunalia.eu
QGIS.ORG Chair:
http://planet.qgis.org/planet/user/28/tag/qgis%20board/
___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [QGIS-Developer] WMS loaded in qgis desktop, not in server

[Jeff McKenna]

On 2020-02-13 9:38 a.m., Richard Duivenvoorde wrote:


@Jeff: my I plug this plugin:
https://plugins.qgis.org/plugins/qgisnetworklogger/
to view wfs/wms requests from within QGIS Desktop? You can see all
requests en response info, AND replay in browser or curl



Excellent, thanks for 'plugging' your cool plugin!

Thanks for sharing.

-jeff


___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [QGIS-Developer] WMS loaded in qgis desktop, not in server

[Richard Duivenvoorde]

On 13/02/2020 14.22, Jeff McKenna wrote:
> Hi Paolo,
> 
> It would be good to get the exact request that your server is sending to
> MapServer, to debug this. (maybe using Fiddler, as described in the
> steps I've recorded at
> https://github.com/mapserver/mapserver/wiki/Get-the-Raw-WMS-Request-Generated-by-QGIS
> )

@Jeff: my I plug this plugin:
https://plugins.qgis.org/plugins/qgisnetworklogger/
to view wfs/wms requests from within QGIS Desktop? You can see all
requests en response info, AND replay in browser or curl

@Paolo: the error you see is when Minnesota mapserver is not receiving
the full url (including the =mymapfile. So looks to me like QGIS
server is handling the server-url different then QGIS desktop.
I would try to connect to a local mapserver and log the apache requests
there?

Regards,

Richard Duivenvoorde
___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [QGIS-Developer] WMS loaded in qgis desktop, not in server

[Jeff McKenna]

Hi Paolo,

It would be good to get the exact request that your server is sending to 
MapServer, to debug this. (maybe using Fiddler, as described in the 
steps I've recorded at 
https://github.com/mapserver/mapserver/wiki/Get-the-Raw-WMS-Request-Generated-by-QGIS 
)


Also, it might also be good to check the WMS server's GetCapabilities 
request, to make sure that there are no 'WARNING' messages in the 
response.  (example request: 
https://demo.gatewaygeomatics.com/cgi-bin/wms_gateway?SERVICE=WMS=GetCapabilities 
)


-jeff



--
Jeff McKenna
MapServer Consulting and Training Services
https://gatewaygeomatics.com/



On 2020-02-13 9:02 a.m., Paolo Cavallini wrote:

Hi all,
I have a couople of WMS layers that are displayed correclty in QGIS
desktop, but disappear in the server. It may be due to an erro on the
WMS side, which in fact returns:
mapserv(): Web application error. Traditional BROWSE mode requires a
TEMPLATE in the WEB section, but none was provided.
What is strange to me is having a different behavious from desktop to
sever. Any hint? Is this expected?
Cheers.



___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

[QGIS-Developer] WMS loaded in qgis desktop, not in server

[Paolo Cavallini]

Hi all,
I have a couople of WMS layers that are displayed correclty in QGIS
desktop, but disappear in the server. It may be due to an erro on the
WMS side, which in fact returns:
mapserv(): Web application error. Traditional BROWSE mode requires a
TEMPLATE in the WEB section, but none was provided.
What is strange to me is having a different behavious from desktop to
sever. Any hint? Is this expected?
Cheers.
-- 
Paolo Cavallini - www.faunalia.eu
QGIS.ORG Chair:
http://planet.qgis.org/planet/user/28/tag/qgis%20board/
___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [QGIS-Developer] Reporting security related issues ?

[Richard Duivenvoorde]

On 13/02/2020 13.08, security minded wrote:
> Hello,
> 
> I've tried to email secur...@qgis.org  but got
> an error message: "We're writing to let you know that the group you
> tried to contact (security) may not exist, or you may not have
> permission to post messages to the group"
> 

Ouch, sorry, me bad.

Google settings are hard for me..

Can you please try again?

Regards,

Richard Duivenvoorde
___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [QGIS-Developer] Reporting security related issues ?

[security minded]

Hello,

I've tried to email secur...@qgis.org but got an error message: "We're
writing to let you know that the group you tried to contact (security) may
not exist, or you may not have permission to post messages to the group"

Le mer. 12 févr. 2020 à 17:10, Richard Duivenvoorde  a
écrit :

> On 12/02/2020 17.01, Matthias Kuhn wrote:
> > Thanks Richard,
> >
> > I'm interested as well in being added.
> >
> > Will all people in the group be added as CC? It would be good if someone
> > asks a question back everyone else gets a notification as well (to avoid
> > asking the same question many times - or nobody reacting at all because
> > everyone assumes someone else has taken action already).
>
> Ok, added
> It's a Google mail group, not sure how to set such stuff...
> IF the mailer cc's to secur...@qgis.org everybody sees that, else..
> don't think so.
> Regards,
> Richard
> ___
> QGIS-Developer mailing list
> QGIS-Developer@lists.osgeo.org
> List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer
___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [QGIS-Developer] Reporting security related issues ?

[Paul Blottiere]

Hi Richard,

I'd like to be added to the list too please :).

Thanks!



Le jeu. 13 févr. 2020 à 09:48, Matthias Kuhn  a écrit :

> On 2/13/20 9:45 AM, Richard Duivenvoorde wrote:
> > On 13/02/2020 09.38, Matthias Kuhn wrote:
> >
> >> Maybe others are better than me in remembering such workflows, but I
> >> will forget that for sure.
> > Which 'workflow'?
> >
> > - somebody finds an issue, and sents an email to secur...@qgis.org
> > - everybody in the mail group sees this and can respond (cc to
> > secur...@qgis.org)
>
> This part of the workflow requires me to realize that this came in
> through an alias and was not directly addressed to me and to remember to
> add the CC to secur...@qgis.org (an address which I have to remember or
> find at this point in time).
>
> But if I'm the only one who is too scattered for this, let's ignore it :)
>
> Matthias
>
> > - somebody picks this up
> >
> > No other services needed?
> >
> > Regards,
> >
> > Richard
> ___
> QGIS-Developer mailing list
> QGIS-Developer@lists.osgeo.org
> List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer



-- 
*Paul Blottiere*

Lead Software Engineer
*https://hytech-imaging.fr/ *

QGIS Core Committer
*https://pblottiere.github.io/* 
___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [QGIS-Developer] [Qgis-user] Make selected features dominant in view

[Richard Duivenvoorde]

Forwarded from user list:

Actual question: "Why are selected features not always painted on top"?

Question to dev's: is the 'control feature rendering' heavy in resources?

Else: would it be possible to always render the selection on top, in the
same way as shown below?

Is it worth a feature request? Or does it slow down painting to much?

Regards,

Richard Duivenvoorde

On 13/02/2020 10.46, SEGGIE Graeme wrote:
> Brilliant, thanks Richard - that works perfectly. As you say would be good if 
> was default, but not too onerous and perhaps speeds up rendering to not have 
> it doing so for every layer etc.
> 
> Graeme.
> 
> 
> Hi Graeme,
> 
> I do not know an answer, but I checked and it's not that selected items 
> always would end up on top...
> 
> This sounds very reasonable though... and helpfull :-) If it is not already 
> there, it would make a nice Feature Request!
> 
> There is in the Layer Properties/Symbology/Layer Rendering an option to 
> 'Control feature rendering order' ...
> Ok, so you can make an  an expression like:
> 
>  is_selected( $currentfeature )
> 
> which then makes your selected features draw last (on top).
> You could at least try that.
> I'm wondering if that would/could not be default painting behaviour?
> 
> Regards,
> 
> Richard Duivenvoorde
> 
> On 12/02/2020 17.34, SEGGIE Graeme wrote:
>> Is there a way to have selected features dominate in the map view? I
>> mean when selected not all selected features of a layer show as yellow
>> (default) if there are other features in the same layer above them in
>> the drawing order. In Arc – anything selected is always shown as such,
>> which is a lot handier for tracking things down spatially, quickly. Am
>> wondering if there is a preference that sets this, which I have not
>> done.  I know I can create a sub-layer with filtering as an
>> alternative to do this, but that seems like more work than it should be.
>>
>> Graeme
___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

[QGIS-Developer] Plugin [1954] Wtyczka GIS Support approval notification.

[noreply]

Plugin Wtyczka GIS Support approval by pcav.
The plugin version "[1954] Wtyczka GIS Support 1.2.5" is now approved
Link: http://plugins.qgis.org/plugins/gissupport_plugin/
___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [QGIS-Developer] Reporting security related issues ?

[Matthias Kuhn]

On 2/13/20 9:45 AM, Richard Duivenvoorde wrote:

On 13/02/2020 09.38, Matthias Kuhn wrote:


Maybe others are better than me in remembering such workflows, but I
will forget that for sure.

Which 'workflow'?

- somebody finds an issue, and sents an email to secur...@qgis.org
- everybody in the mail group sees this and can respond (cc to
secur...@qgis.org)


This part of the workflow requires me to realize that this came in 
through an alias and was not directly addressed to me and to remember to 
add the CC to secur...@qgis.org (an address which I have to remember or 
find at this point in time).


But if I'm the only one who is too scattered for this, let's ignore it :)

Matthias


- somebody picks this up

No other services needed?

Regards,

Richard

___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [QGIS-Developer] Reporting security related issues ?

[Richard Duivenvoorde]

On 13/02/2020 09.38, Matthias Kuhn wrote:

> Maybe others are better than me in remembering such workflows, but I
> will forget that for sure.

Which 'workflow'?

- somebody finds an issue, and sents an email to secur...@qgis.org
- everybody in the mail group sees this and can respond (cc to
secur...@qgis.org)
- somebody picks this up

No other services needed?

Regards,

Richard
___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [QGIS-Developer] Reporting security related issues ?

[Matthias Kuhn]

On 2/12/20 5:09 PM, Richard Duivenvoorde wrote:

On 12/02/2020 17.01, Matthias Kuhn wrote:

Thanks Richard,

I'm interested as well in being added.

Will all people in the group be added as CC? It would be good if someone
asks a question back everyone else gets a notification as well (to avoid
asking the same question many times - or nobody reacting at all because
everyone assumes someone else has taken action already).

Ok, added
It's a Google mail group, not sure how to set such stuff...
IF the mailer cc's to secur...@qgis.org everybody sees that, else..
don't think so.
Regards,
Richard


Maybe others are better than me in remembering such workflows, but I 
will forget that for sure.


What would be involved to setup the infrastructure as proposed by Jukka?

Matthias

___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer