Thanks all for your help, I'll have in a near future to implement a fully secured private site since I'm gonna have to publish VERY sensible data via WMS. I can tell that this issue scares the IT group. Story to follow... But for now, obscurity is sufficient.
I'm a bit in obscurity myself regardin http_referer...I need to know more about the mechanic... It's not clear what I should do in the mapfile and in my OpenLayers code? I added Daniel's code in Apache conf. "Then your WMS requests should refer to the mapfile using "map=MYMAP" instead of a full path. If the referrer is not valid, then MYMAP will not be set and MapServer will spit out an error." Do I need to use the MYMAP environment variabble in the mapfile or in OL code, or both? I'm using OpenLayers to create a WMS layer with new OpenLayers.Layer.WMS(name, url, params, options); Instead of the path of the mapfile should I use MYMAP (Environment variable MYMAP defined in the conf of Apache). If so, Is there some magic there to get the environment variable value? Should I get it with some php code? Thanks Steve Daniel Morissette <[email protected]>@openlayers.org Envoyé par : [email protected] 13/10/2009 02:56 PM A [email protected] cc Objet Re: [OpenLayers-Users] Control access to WMS Christopher Schmidt wrote: > > If you care about people 'stumbling in', this would be sufficient. If you > actually want to ensure people can't use the data outside of your app, > it's not. > [...] > > Yeah, something like that is what I would probably do if I wanted something > taht was obscurity and not security. :) > I agree (and I never used the word security). But this may be sufficient in some simple cases. :) And for a more complete Access Control solution, everyone is invited to a presentation of the new GeoPrisma project in a conference near you: FOSS4G 2009 (Sydney, 2009-10-23): http://2009.foss4g.org/presentations/#presentation_146 Géomatique 2009 (Montréal, 2009-10-21): http://www.geomatique2009.com/en/papers/program Daniel -- Daniel Morissette http://www.mapgears.com/ _______________________________________________ Users mailing list [email protected] http://openlayers.org/mailman/listinfo/users
_______________________________________________ Users mailing list [email protected] http://openlayers.org/mailman/listinfo/users
