Re: [Qgis-user] GDAL problems on Mac 10.14.6

[Andrea Giudiceandrea]

RMG wrote
> Hello Andrea,
> 
> Thanks for your response, but I am also getting the following error
> messages. It is not letting me do a lot of things like clipping,
> classifying, and modifying ROIs.

Hi,
this error is related to the GDAL library.

it seems your QGIS installation lacks of the MrSID/MG4Lidar and ECW/JPEG2000
SDKs for the GDAL library and probably you are trying to use images in those
format/compression.

How have you installed QGIS? Have you used the QGIS macOS Installer Version
3.12 from https://qgis.org/en/site/forusers/download.html?

In this case I think you can file an issue report on
https://github.com/qgis/QGIS-Mac-Packager or you may be wait for some user
who solved the problem to point you to a direct solution.

Regards.

Andrea



--
Sent from: http://osgeo-org.1560.x6.nabble.com/QGIS-User-f4125267.html
___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user

Re: [Qgis-user] Save projects to DB without creator's permissions

[Cliff Patterson]

Awesome, thanks!

On Mon, Jun 1, 2020 at 11:43 AM Alessandro Pasotti 
wrote:

>
> Glad to hear that it worked!
>
> If you feel like the documentation should include an example, feel free to
> add some more content to the
> https://docs.qgis.org/testing/en/docs/user_manual/auth_system/auth_workflows.html
>
> There is also a section on organizations that might be relevant for this
> kind of information.
>
> https://docs.qgis.org/testing/en/docs/user_manual/introduction/qgis_configuration.html#deploying-qgis-within-an-organization
>
>
>
> On Mon, Jun 1, 2020 at 5:29 PM Cliff Patterson 
> wrote:
>
>> Tested this solution and it works perfectly. When using the same ID in
>> the authentication settings, the projects saved to the DB do not retain the
>> creator's per-layer permissions.
>>
>> Thanks for the help!
>>
>> Cliff
>>
>> On Mon, Jun 1, 2020 at 11:19 AM Cliff Patterson 
>> wrote:
>>
>>> Hi Karl and Alessandro,
>>>
>>> This is helpful but DEFINITELY not intuitive. I will test this
>>> configuration and report back.
>>>
>>> Cheers,
>>> Cliff
>>>
>>> On Mon, Jun 1, 2020 at 9:51 AM Karl Magnus Jönsson <
>>> karl-magnus.jons...@kristianstad.se> wrote:
>>>
 Hi!

 Alessandro, you where quicker! J



 If I understand correct, the actual credentials isn’t stored to the
 project. Just the auth config ID. If the user doesn’t have this in his
 local authentication database, or has it with other credentials(read) the
 project will not open with admin credentials.



 *Karl-Magnus Jönsson*



 *Från:* Qgis-user  *För *Cliff
 Patterson
 *Skickat:* den 1 juni 2020 15:36
 *Till:* Alessandro Pasotti 
 *Kopia:* qgis-user 
 *Ämne:* Re: [Qgis-user] Save projects to DB without creator's
 permissions



 That's exactly the problem with the auth system. If you connect to a DB
 using the auth system and store a map in the DB (or anywhere for that
 matter), the map contains your credentials/permissions for EVERY layer that
 you added. So if you create a map while logged in as DB owner (i.e. full
 perms for every layer), any user who opens it will have full permissions on
 every layer in the map. The only workaround for this is to remember to use
 basic auth and uncheck "store" beside password whenever creating a shared
 project.



 Any other less vulnerable workarounds would be very helpful, though I
 doubt any exist.



 Cliff



 On Fri, May 29, 2020 at 3:03 PM Alessandro Pasotti 
 wrote:

 Maybe all that you need is in the QHIS auth system is
 https://docs.qgis.org/3.10/en/docs/user_manual/auth_system/auth_workflows.html#changing-authentication-config-id



 The master password can be stored in the operating system wallet so
 that the user will not need to type his password.



 Regards





 On Fri, May 29, 2020, 19:39 Cliff Patterson 
 wrote:

 PS: I realize I can create maps with basic auth and not store the PW,
 which prompts the user to enter their creds. But is there a better way now
 to achieve the same result?



 Cliff



 On Fri, May 29, 2020 at 1:29 PM Cliff Patterson 
 wrote:

 What is the best approach to save QGIS projects to PostgreSQL
 without saving the project-creator's credentials/permissions? If the DB
 admin creates a project and saves it to the DB, anyone opening that project
 will attain the admin's permissions on layers in that map.



 To recreate:



 1) Create a map containing PostGIS layers and save project to DB. All
 layers should be editable by the admin. Admin is logged into DB with auth
 config, not basic auth.

 2) Create a new read-only user and new profile in QGIS and log in to DB.

 3) Open the project and try to edit layers. Read-only user will be able
 to see and edit all layers just like the DB Admin.



 Is there a way to save projects to DB WITHOUT saving any user
 creds/permissions?



 Cliff



 --

 Cliff Patterson Ph.D.

 *PSD* | Senior GIS Consultant
 P: 519-690-2565 ext. 2616
 www.psdrcs.com
 London | 148 Fullarton St. 9th Floor




 --

 Cliff Patterson Ph.D.

 *PSD* | Senior GIS Consultant
 P: 519-690-2565 ext. 2616
 www.psdrcs.com
 London | 148 Fullarton St. 9th Floor

 ___
 Qgis-user mailing list
 Qgis-user@lists.osgeo.org
 List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
 Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user




 --

 Cliff Patterson Ph.D.

 *PSD* | Senior GIS Consultant
 P: 519-690-2565 ext. 2616
 

Re: [Qgis-user] QGIS Authentication to an ArcGIS Enterprise Portal

[Warren Medernach]

Hi Myall, just checking in on this to see if you were able to put some
details together about the OAuth2 connection to Portal from QGIS.  Even a
screen cap of working settings would be helpful.

Thanks!

Warren

On Tue., May 26, 2020, 6:06 p.m. Warren Medernach, 
wrote:

> That would be fantastic, thank you!
> Please keep me posted.
>
> Warren
>
> On Tue, May 26, 2020 at 4:54 PM Nyall Dawson 
> wrote:
>
>> On Wed, 27 May 2020 at 09:35, Warren Medernach 
>> wrote:
>> >
>> > Thanks so much for the response Nyall, at least now we know something
>> should be possible.
>> > Is there anyway you could share a screen cap, or provide some guidance
>> for the required settings in the OAuth2 dialog in QGIS.
>>
>> Let me see if I can find time to write this up as a blog post later
>> today... there's a bit involved in the setup which I'd like to step
>> through
>>
>> Nyall
>>
>> >
>> > Thanks again,
>> > Warren
>> >
>> > On Tue, May 26, 2020 at 4:42 PM Nyall Dawson 
>> wrote:
>> >>
>> >> On Tue, 26 May 2020 at 03:59, Warren Medernach 
>> wrote:
>> >> >
>> >> > QGIS version: 3.12.2-București
>> >> > ESRI Portal version: 10.7.1
>> >> >
>> >> > We have recently been testing out the access to our ESRI Enterprise
>> Portal from QGIS using the ArcGisMapServer and ArcGisFeatureServer
>> connectors. Our Portal is configured via SAML for Enterprise Logins using
>> our corporate domain credentials as well as Built-In ArcGIS Portal users.
>> >> >
>> >> > We have tried the following Authentication methods: Basic
>> Authentication using a built-in Portal user and Token based Authentication.
>> >> >
>> >> > It doesn't seem to matter which auth method we use, QGIS will only
>> see content that is shared with Everyone in the Portal.
>> >> >
>> >> > Is it possible to connect to an ESRI Portal and have QGIS only show
>> content the user has access to based on their settings in the ESRI Portal?
>> ie. the Groups and Content they have access to.
>> >>
>> >> I've had great experience using the o2 authentication setup and ESRI
>> >> Portal. In recent QGIS releases this is seamless and should exactly
>> >> match your needs.
>> >>
>> >> Nyall
>>
>
___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user

Re: [Qgis-user] Save projects to DB without creator's permissions

[Alessandro Pasotti]

Glad to hear that it worked!

If you feel like the documentation should include an example, feel free to
add some more content to the
https://docs.qgis.org/testing/en/docs/user_manual/auth_system/auth_workflows.html

There is also a section on organizations that might be relevant for this
kind of information.
https://docs.qgis.org/testing/en/docs/user_manual/introduction/qgis_configuration.html#deploying-qgis-within-an-organization



On Mon, Jun 1, 2020 at 5:29 PM Cliff Patterson 
wrote:

> Tested this solution and it works perfectly. When using the same ID in the
> authentication settings, the projects saved to the DB do not retain the
> creator's per-layer permissions.
>
> Thanks for the help!
>
> Cliff
>
> On Mon, Jun 1, 2020 at 11:19 AM Cliff Patterson 
> wrote:
>
>> Hi Karl and Alessandro,
>>
>> This is helpful but DEFINITELY not intuitive. I will test this
>> configuration and report back.
>>
>> Cheers,
>> Cliff
>>
>> On Mon, Jun 1, 2020 at 9:51 AM Karl Magnus Jönsson <
>> karl-magnus.jons...@kristianstad.se> wrote:
>>
>>> Hi!
>>>
>>> Alessandro, you where quicker! J
>>>
>>>
>>>
>>> If I understand correct, the actual credentials isn’t stored to the
>>> project. Just the auth config ID. If the user doesn’t have this in his
>>> local authentication database, or has it with other credentials(read) the
>>> project will not open with admin credentials.
>>>
>>>
>>>
>>> *Karl-Magnus Jönsson*
>>>
>>>
>>>
>>> *Från:* Qgis-user  *För *Cliff
>>> Patterson
>>> *Skickat:* den 1 juni 2020 15:36
>>> *Till:* Alessandro Pasotti 
>>> *Kopia:* qgis-user 
>>> *Ämne:* Re: [Qgis-user] Save projects to DB without creator's
>>> permissions
>>>
>>>
>>>
>>> That's exactly the problem with the auth system. If you connect to a DB
>>> using the auth system and store a map in the DB (or anywhere for that
>>> matter), the map contains your credentials/permissions for EVERY layer that
>>> you added. So if you create a map while logged in as DB owner (i.e. full
>>> perms for every layer), any user who opens it will have full permissions on
>>> every layer in the map. The only workaround for this is to remember to use
>>> basic auth and uncheck "store" beside password whenever creating a shared
>>> project.
>>>
>>>
>>>
>>> Any other less vulnerable workarounds would be very helpful, though I
>>> doubt any exist.
>>>
>>>
>>>
>>> Cliff
>>>
>>>
>>>
>>> On Fri, May 29, 2020 at 3:03 PM Alessandro Pasotti 
>>> wrote:
>>>
>>> Maybe all that you need is in the QHIS auth system is
>>> https://docs.qgis.org/3.10/en/docs/user_manual/auth_system/auth_workflows.html#changing-authentication-config-id
>>>
>>>
>>>
>>> The master password can be stored in the operating system wallet so that
>>> the user will not need to type his password.
>>>
>>>
>>>
>>> Regards
>>>
>>>
>>>
>>>
>>>
>>> On Fri, May 29, 2020, 19:39 Cliff Patterson 
>>> wrote:
>>>
>>> PS: I realize I can create maps with basic auth and not store the PW,
>>> which prompts the user to enter their creds. But is there a better way now
>>> to achieve the same result?
>>>
>>>
>>>
>>> Cliff
>>>
>>>
>>>
>>> On Fri, May 29, 2020 at 1:29 PM Cliff Patterson 
>>> wrote:
>>>
>>> What is the best approach to save QGIS projects to PostgreSQL
>>> without saving the project-creator's credentials/permissions? If the DB
>>> admin creates a project and saves it to the DB, anyone opening that project
>>> will attain the admin's permissions on layers in that map.
>>>
>>>
>>>
>>> To recreate:
>>>
>>>
>>>
>>> 1) Create a map containing PostGIS layers and save project to DB. All
>>> layers should be editable by the admin. Admin is logged into DB with auth
>>> config, not basic auth.
>>>
>>> 2) Create a new read-only user and new profile in QGIS and log in to DB.
>>>
>>> 3) Open the project and try to edit layers. Read-only user will be able
>>> to see and edit all layers just like the DB Admin.
>>>
>>>
>>>
>>> Is there a way to save projects to DB WITHOUT saving any user
>>> creds/permissions?
>>>
>>>
>>>
>>> Cliff
>>>
>>>
>>>
>>> --
>>>
>>> Cliff Patterson Ph.D.
>>>
>>> *PSD* | Senior GIS Consultant
>>> P: 519-690-2565 ext. 2616
>>> www.psdrcs.com
>>> London | 148 Fullarton St. 9th Floor
>>>
>>>
>>>
>>>
>>> --
>>>
>>> Cliff Patterson Ph.D.
>>>
>>> *PSD* | Senior GIS Consultant
>>> P: 519-690-2565 ext. 2616
>>> www.psdrcs.com
>>> London | 148 Fullarton St. 9th Floor
>>>
>>> ___
>>> Qgis-user mailing list
>>> Qgis-user@lists.osgeo.org
>>> List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
>>> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user
>>>
>>>
>>>
>>>
>>> --
>>>
>>> Cliff Patterson Ph.D.
>>>
>>> *PSD* | Senior GIS Consultant
>>> P: 519-690-2565 ext. 2616
>>> www.psdrcs.com
>>> London | 148 Fullarton St. 9th Floor
>>>
>>>
>>
>> --
>>
>> Cliff Patterson Ph.D.
>>
>> *PSD* | Senior GIS Consultant
>> P: 519-690-2565 ext. 2616
>> www.psdrcs.com
>> London | 148 Fullarton St. 9th Floor
>>
>>
>
> --
>
> Cliff Patterson Ph.D.
>
> *PSD* | Senior 

Re: [Qgis-user] Save projects to DB without creator's permissions

[Cliff Patterson]

Tested this solution and it works perfectly. When using the same ID in the
authentication settings, the projects saved to the DB do not retain the
creator's per-layer permissions.

Thanks for the help!

Cliff

On Mon, Jun 1, 2020 at 11:19 AM Cliff Patterson 
wrote:

> Hi Karl and Alessandro,
>
> This is helpful but DEFINITELY not intuitive. I will test this
> configuration and report back.
>
> Cheers,
> Cliff
>
> On Mon, Jun 1, 2020 at 9:51 AM Karl Magnus Jönsson <
> karl-magnus.jons...@kristianstad.se> wrote:
>
>> Hi!
>>
>> Alessandro, you where quicker! J
>>
>>
>>
>> If I understand correct, the actual credentials isn’t stored to the
>> project. Just the auth config ID. If the user doesn’t have this in his
>> local authentication database, or has it with other credentials(read) the
>> project will not open with admin credentials.
>>
>>
>>
>> *Karl-Magnus Jönsson*
>>
>>
>>
>> *Från:* Qgis-user  *För *Cliff
>> Patterson
>> *Skickat:* den 1 juni 2020 15:36
>> *Till:* Alessandro Pasotti 
>> *Kopia:* qgis-user 
>> *Ämne:* Re: [Qgis-user] Save projects to DB without creator's permissions
>>
>>
>>
>> That's exactly the problem with the auth system. If you connect to a DB
>> using the auth system and store a map in the DB (or anywhere for that
>> matter), the map contains your credentials/permissions for EVERY layer that
>> you added. So if you create a map while logged in as DB owner (i.e. full
>> perms for every layer), any user who opens it will have full permissions on
>> every layer in the map. The only workaround for this is to remember to use
>> basic auth and uncheck "store" beside password whenever creating a shared
>> project.
>>
>>
>>
>> Any other less vulnerable workarounds would be very helpful, though I
>> doubt any exist.
>>
>>
>>
>> Cliff
>>
>>
>>
>> On Fri, May 29, 2020 at 3:03 PM Alessandro Pasotti 
>> wrote:
>>
>> Maybe all that you need is in the QHIS auth system is
>> https://docs.qgis.org/3.10/en/docs/user_manual/auth_system/auth_workflows.html#changing-authentication-config-id
>>
>>
>>
>> The master password can be stored in the operating system wallet so that
>> the user will not need to type his password.
>>
>>
>>
>> Regards
>>
>>
>>
>>
>>
>> On Fri, May 29, 2020, 19:39 Cliff Patterson 
>> wrote:
>>
>> PS: I realize I can create maps with basic auth and not store the PW,
>> which prompts the user to enter their creds. But is there a better way now
>> to achieve the same result?
>>
>>
>>
>> Cliff
>>
>>
>>
>> On Fri, May 29, 2020 at 1:29 PM Cliff Patterson 
>> wrote:
>>
>> What is the best approach to save QGIS projects to PostgreSQL
>> without saving the project-creator's credentials/permissions? If the DB
>> admin creates a project and saves it to the DB, anyone opening that project
>> will attain the admin's permissions on layers in that map.
>>
>>
>>
>> To recreate:
>>
>>
>>
>> 1) Create a map containing PostGIS layers and save project to DB. All
>> layers should be editable by the admin. Admin is logged into DB with auth
>> config, not basic auth.
>>
>> 2) Create a new read-only user and new profile in QGIS and log in to DB.
>>
>> 3) Open the project and try to edit layers. Read-only user will be able
>> to see and edit all layers just like the DB Admin.
>>
>>
>>
>> Is there a way to save projects to DB WITHOUT saving any user
>> creds/permissions?
>>
>>
>>
>> Cliff
>>
>>
>>
>> --
>>
>> Cliff Patterson Ph.D.
>>
>> *PSD* | Senior GIS Consultant
>> P: 519-690-2565 ext. 2616
>> www.psdrcs.com
>> London | 148 Fullarton St. 9th Floor
>>
>>
>>
>>
>> --
>>
>> Cliff Patterson Ph.D.
>>
>> *PSD* | Senior GIS Consultant
>> P: 519-690-2565 ext. 2616
>> www.psdrcs.com
>> London | 148 Fullarton St. 9th Floor
>>
>> ___
>> Qgis-user mailing list
>> Qgis-user@lists.osgeo.org
>> List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
>> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user
>>
>>
>>
>>
>> --
>>
>> Cliff Patterson Ph.D.
>>
>> *PSD* | Senior GIS Consultant
>> P: 519-690-2565 ext. 2616
>> www.psdrcs.com
>> London | 148 Fullarton St. 9th Floor
>>
>>
>
> --
>
> Cliff Patterson Ph.D.
>
> *PSD* | Senior GIS Consultant
> P: 519-690-2565 ext. 2616
> www.psdrcs.com
> London | 148 Fullarton St. 9th Floor
>
>

-- 

Cliff Patterson Ph.D.

*PSD* | Senior GIS Consultant
P: 519-690-2565 ext. 2616
www.psdrcs.com
London | 148 Fullarton St. 9th Floor
___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user

Re: [Qgis-user] Save projects to DB without creator's permissions

[Cliff Patterson]

Hi Karl and Alessandro,

This is helpful but DEFINITELY not intuitive. I will test this
configuration and report back.

Cheers,
Cliff

On Mon, Jun 1, 2020 at 9:51 AM Karl Magnus Jönsson <
karl-magnus.jons...@kristianstad.se> wrote:

> Hi!
>
> Alessandro, you where quicker! J
>
>
>
> If I understand correct, the actual credentials isn’t stored to the
> project. Just the auth config ID. If the user doesn’t have this in his
> local authentication database, or has it with other credentials(read) the
> project will not open with admin credentials.
>
>
>
> *Karl-Magnus Jönsson*
>
>
>
> *Från:* Qgis-user  *För *Cliff
> Patterson
> *Skickat:* den 1 juni 2020 15:36
> *Till:* Alessandro Pasotti 
> *Kopia:* qgis-user 
> *Ämne:* Re: [Qgis-user] Save projects to DB without creator's permissions
>
>
>
> That's exactly the problem with the auth system. If you connect to a DB
> using the auth system and store a map in the DB (or anywhere for that
> matter), the map contains your credentials/permissions for EVERY layer that
> you added. So if you create a map while logged in as DB owner (i.e. full
> perms for every layer), any user who opens it will have full permissions on
> every layer in the map. The only workaround for this is to remember to use
> basic auth and uncheck "store" beside password whenever creating a shared
> project.
>
>
>
> Any other less vulnerable workarounds would be very helpful, though I
> doubt any exist.
>
>
>
> Cliff
>
>
>
> On Fri, May 29, 2020 at 3:03 PM Alessandro Pasotti 
> wrote:
>
> Maybe all that you need is in the QHIS auth system is
> https://docs.qgis.org/3.10/en/docs/user_manual/auth_system/auth_workflows.html#changing-authentication-config-id
>
>
>
> The master password can be stored in the operating system wallet so that
> the user will not need to type his password.
>
>
>
> Regards
>
>
>
>
>
> On Fri, May 29, 2020, 19:39 Cliff Patterson  wrote:
>
> PS: I realize I can create maps with basic auth and not store the PW,
> which prompts the user to enter their creds. But is there a better way now
> to achieve the same result?
>
>
>
> Cliff
>
>
>
> On Fri, May 29, 2020 at 1:29 PM Cliff Patterson 
> wrote:
>
> What is the best approach to save QGIS projects to PostgreSQL
> without saving the project-creator's credentials/permissions? If the DB
> admin creates a project and saves it to the DB, anyone opening that project
> will attain the admin's permissions on layers in that map.
>
>
>
> To recreate:
>
>
>
> 1) Create a map containing PostGIS layers and save project to DB. All
> layers should be editable by the admin. Admin is logged into DB with auth
> config, not basic auth.
>
> 2) Create a new read-only user and new profile in QGIS and log in to DB.
>
> 3) Open the project and try to edit layers. Read-only user will be able to
> see and edit all layers just like the DB Admin.
>
>
>
> Is there a way to save projects to DB WITHOUT saving any user
> creds/permissions?
>
>
>
> Cliff
>
>
>
> --
>
> Cliff Patterson Ph.D.
>
> *PSD* | Senior GIS Consultant
> P: 519-690-2565 ext. 2616
> www.psdrcs.com
> London | 148 Fullarton St. 9th Floor
>
>
>
>
> --
>
> Cliff Patterson Ph.D.
>
> *PSD* | Senior GIS Consultant
> P: 519-690-2565 ext. 2616
> www.psdrcs.com
> London | 148 Fullarton St. 9th Floor
>
> ___
> Qgis-user mailing list
> Qgis-user@lists.osgeo.org
> List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user
>
>
>
>
> --
>
> Cliff Patterson Ph.D.
>
> *PSD* | Senior GIS Consultant
> P: 519-690-2565 ext. 2616
> www.psdrcs.com
> London | 148 Fullarton St. 9th Floor
>
>

-- 

Cliff Patterson Ph.D.

*PSD* | Senior GIS Consultant
P: 519-690-2565 ext. 2616
www.psdrcs.com
London | 148 Fullarton St. 9th Floor
___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user

Re: [Qgis-user] Save projects to DB without creator's permissions

[Karl Magnus Jönsson]

Hi!
Alessandro, you where quicker! ☺

If I understand correct, the actual credentials isn’t stored to the project. 
Just the auth config ID. If the user doesn’t have this in his local 
authentication database, or has it with other credentials(read) the project 
will not open with admin credentials.

Karl-Magnus Jönsson

Från: Qgis-user  För Cliff Patterson
Skickat: den 1 juni 2020 15:36
Till: Alessandro Pasotti 
Kopia: qgis-user 
Ämne: Re: [Qgis-user] Save projects to DB without creator's permissions

That's exactly the problem with the auth system. If you connect to a DB using 
the auth system and store a map in the DB (or anywhere for that matter), the 
map contains your credentials/permissions for EVERY layer that you added. So if 
you create a map while logged in as DB owner (i.e. full perms for every layer), 
any user who opens it will have full permissions on every layer in the map. The 
only workaround for this is to remember to use basic auth and uncheck "store" 
beside password whenever creating a shared project.

Any other less vulnerable workarounds would be very helpful, though I doubt any 
exist.

Cliff

On Fri, May 29, 2020 at 3:03 PM Alessandro Pasotti 
mailto:apaso...@gmail.com>> wrote:
Maybe all that you need is in the QHIS auth system is 
https://docs.qgis.org/3.10/en/docs/user_manual/auth_system/auth_workflows.html#changing-authentication-config-id

The master password can be stored in the operating system wallet so that the 
user will not need to type his password.

Regards


On Fri, May 29, 2020, 19:39 Cliff Patterson 
mailto:cpatter...@psdrcs.com>> wrote:
PS: I realize I can create maps with basic auth and not store the PW, which 
prompts the user to enter their creds. But is there a better way now to achieve 
the same result?

Cliff

On Fri, May 29, 2020 at 1:29 PM Cliff Patterson 
mailto:cpatter...@psdrcs.com>> wrote:
What is the best approach to save QGIS projects to PostgreSQL without saving 
the project-creator's credentials/permissions? If the DB admin creates a 
project and saves it to the DB, anyone opening that project will attain the 
admin's permissions on layers in that map.

To recreate:

1) Create a map containing PostGIS layers and save project to DB. All layers 
should be editable by the admin. Admin is logged into DB with auth config, not 
basic auth.
2) Create a new read-only user and new profile in QGIS and log in to DB.
3) Open the project and try to edit layers. Read-only user will be able to see 
and edit all layers just like the DB Admin.

Is there a way to save projects to DB WITHOUT saving any user creds/permissions?

Cliff

--

Cliff Patterson Ph.D.

PSD | Senior GIS Consultant
P: 519-690-2565 ext. 2616
www.psdrcs.com
London | 148 Fullarton St. 9th Floor

[http://psdrcs.com/assets/email_signature.png]


--

Cliff Patterson Ph.D.

PSD | Senior GIS Consultant
P: 519-690-2565 ext. 2616
www.psdrcs.com
London | 148 Fullarton St. 9th Floor

[http://psdrcs.com/assets/email_signature.png]
___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user


--

Cliff Patterson Ph.D.

PSD | Senior GIS Consultant
P: 519-690-2565 ext. 2616
www.psdrcs.com
London | 148 Fullarton St. 9th Floor

[http://psdrcs.com/assets/email_signature.png]
___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user

Re: [Qgis-user] Save projects to DB without creator's permissions

[Alessandro Pasotti]

On Mon, Jun 1, 2020 at 3:35 PM Cliff Patterson 
wrote:

> That's exactly the problem with the auth system. If you connect to a DB
> using the auth system and store a map in the DB (or anywhere for that
> matter), the map contains your credentials/permissions for EVERY layer that
> you added. So if you create a map while logged in as DB owner (i.e. full
> perms for every layer), any user who opens it will have full permissions on
> every layer in the map. The only workaround for this is to remember to use
> basic auth and uncheck "store" beside password whenever creating a shared
> project.
>
> Any other less vulnerable workarounds would be very helpful, though I
> doubt any exist.
>

Cliff, I probably misunderstood your issue.

What I was trying to say is that you can create a project with (say) one PG
layer that required your credentials (user "cliff")  to be created but you
want other users (user "alice") to be able to access the layer with her own
credentials.

You can create an authentication configuration and set its authid to some
easy to share value (you have 7 chars if I remember correctly), then you
will store your credentials in your authentication DB for that authid and
"alice" will store her credentials in her own authentication DB using the
same authid.

Note that "alice" credentials are different from "cliffs" credentials, the
authentication DB is also different (unless they are using the same machine
and the same OS account and the same user profile), the only thing that is
equal is the authentication configuration id.

The thing is that you don't share the authentication DB, you share the
authid 7 digits code only an the other users will use their own
credentials.

Kind regards,



> Cliff
>
> On Fri, May 29, 2020 at 3:03 PM Alessandro Pasotti 
> wrote:
>
>> Maybe all that you need is in the QHIS auth system is
>> https://docs.qgis.org/3.10/en/docs/user_manual/auth_system/auth_workflows.html#changing-authentication-config-id
>>
>> The master password can be stored in the operating system wallet so that
>> the user will not need to type his password.
>>
>> Regards
>>
>>
>> On Fri, May 29, 2020, 19:39 Cliff Patterson 
>> wrote:
>>
>>> PS: I realize I can create maps with basic auth and not store the PW,
>>> which prompts the user to enter their creds. But is there a better way now
>>> to achieve the same result?
>>>
>>> Cliff
>>>
>>> On Fri, May 29, 2020 at 1:29 PM Cliff Patterson 
>>> wrote:
>>>
 What is the best approach to save QGIS projects to PostgreSQL
 without saving the project-creator's credentials/permissions? If the DB
 admin creates a project and saves it to the DB, anyone opening that project
 will attain the admin's permissions on layers in that map.

 To recreate:

 1) Create a map containing PostGIS layers and save project to DB. All
 layers should be editable by the admin. Admin is logged into DB with auth
 config, not basic auth.
 2) Create a new read-only user and new profile in QGIS and log in to DB.
 3) Open the project and try to edit layers. Read-only user will be able
 to see and edit all layers just like the DB Admin.

 Is there a way to save projects to DB WITHOUT saving any user
 creds/permissions?

 Cliff

 --

 Cliff Patterson Ph.D.

 *PSD* | Senior GIS Consultant
 P: 519-690-2565 ext. 2616
 www.psdrcs.com
 London | 148 Fullarton St. 9th Floor


>>>
>>> --
>>>
>>> Cliff Patterson Ph.D.
>>>
>>> *PSD* | Senior GIS Consultant
>>> P: 519-690-2565 ext. 2616
>>> www.psdrcs.com
>>> London | 148 Fullarton St. 9th Floor
>>>
>>> ___
>>> Qgis-user mailing list
>>> Qgis-user@lists.osgeo.org
>>> List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
>>> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user
>>
>>
>
> --
>
> Cliff Patterson Ph.D.
>
> *PSD* | Senior GIS Consultant
> P: 519-690-2565 ext. 2616
> www.psdrcs.com
> London | 148 Fullarton St. 9th Floor
>
>

-- 
Alessandro Pasotti
QCooperative:  www.qcooperative.net
ItOpen:   www.itopen.it
___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user

Re: [Qgis-user] Save projects to DB without creator's permissions

[Cliff Patterson]

That's exactly the problem with the auth system. If you connect to a DB
using the auth system and store a map in the DB (or anywhere for that
matter), the map contains your credentials/permissions for EVERY layer that
you added. So if you create a map while logged in as DB owner (i.e. full
perms for every layer), any user who opens it will have full permissions on
every layer in the map. The only workaround for this is to remember to use
basic auth and uncheck "store" beside password whenever creating a shared
project.

Any other less vulnerable workarounds would be very helpful, though I doubt
any exist.

Cliff

On Fri, May 29, 2020 at 3:03 PM Alessandro Pasotti 
wrote:

> Maybe all that you need is in the QHIS auth system is
> https://docs.qgis.org/3.10/en/docs/user_manual/auth_system/auth_workflows.html#changing-authentication-config-id
>
> The master password can be stored in the operating system wallet so that
> the user will not need to type his password.
>
> Regards
>
>
> On Fri, May 29, 2020, 19:39 Cliff Patterson  wrote:
>
>> PS: I realize I can create maps with basic auth and not store the PW,
>> which prompts the user to enter their creds. But is there a better way now
>> to achieve the same result?
>>
>> Cliff
>>
>> On Fri, May 29, 2020 at 1:29 PM Cliff Patterson 
>> wrote:
>>
>>> What is the best approach to save QGIS projects to PostgreSQL
>>> without saving the project-creator's credentials/permissions? If the DB
>>> admin creates a project and saves it to the DB, anyone opening that project
>>> will attain the admin's permissions on layers in that map.
>>>
>>> To recreate:
>>>
>>> 1) Create a map containing PostGIS layers and save project to DB. All
>>> layers should be editable by the admin. Admin is logged into DB with auth
>>> config, not basic auth.
>>> 2) Create a new read-only user and new profile in QGIS and log in to DB.
>>> 3) Open the project and try to edit layers. Read-only user will be able
>>> to see and edit all layers just like the DB Admin.
>>>
>>> Is there a way to save projects to DB WITHOUT saving any user
>>> creds/permissions?
>>>
>>> Cliff
>>>
>>> --
>>>
>>> Cliff Patterson Ph.D.
>>>
>>> *PSD* | Senior GIS Consultant
>>> P: 519-690-2565 ext. 2616
>>> www.psdrcs.com
>>> London | 148 Fullarton St. 9th Floor
>>>
>>>
>>
>> --
>>
>> Cliff Patterson Ph.D.
>>
>> *PSD* | Senior GIS Consultant
>> P: 519-690-2565 ext. 2616
>> www.psdrcs.com
>> London | 148 Fullarton St. 9th Floor
>>
>> ___
>> Qgis-user mailing list
>> Qgis-user@lists.osgeo.org
>> List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
>> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user
>
>

-- 

Cliff Patterson Ph.D.

*PSD* | Senior GIS Consultant
P: 519-690-2565 ext. 2616
www.psdrcs.com
London | 148 Fullarton St. 9th Floor
___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user

Re: [Qgis-user] Map contest: mapping Pi for the 3.14 splash screen

[Anita Graser]

Thank you to everyone who participated in our "Map of Pi" contest!

We've received numerous inspiring submissions. Here's a little preview
of the submission folder:

https://drive.google.com/file/d/1LVd26O9TscIFdBUh8aXSitaFUKZxClZg/view?usp=sharing

As always, the new splash screen will be revealed shortly, in time for
packaging.

Regards,

Anita


On 14.05.2020 13:44, Anita Graser wrote:

Dear QGIS mappers,

As you may have noticed, the next release version will be 3.14 and
therefore, we will call it 'Pi'.

Usually our versions are named for community meeting locations and the
splash screen shows a map related to this location.

For 3.14 we are looking for creative maps that capture the essence of Pi.

All submissions will receive an honorable mention in the release blog
post.

The winner will see their map on the release splash screen and banner
on qgis.org.

To participate, please submit your maps at
https://forms.gle/DbLL3BfvwYw33qfJ8

The deadline is 31st May 2020.

Regards,

Anita







___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user

[Qgis-user] importing xl data

[Boaz Bar Ilan]

hi

while adding excel tables to my layers ( in order to join it to a vector
layer) , the original fields change and appear as field 1 field 2 and so on
can any one know what too do about it ?
if I add it as csv , its appear alright but thaen I cant edit the attribute
table
thanks
boaz
___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user