[GeoNetwork-users] OGC CSW compliance

Hi,

some days ago I wrote a mail to the list according to some problems with compliancy to OGC CSW and ISO AP specification. Unfortunately there has been no answer. It would be great if somebody could approve that these problems exits or deny it and give me some hints on what I did wrong.

I like to use GeoNetwork (2.4.3) as a OGC CSW but I have two problems
performing transactions on it.
1) After authenticating against the server I send an INSERT request that
is valid against OGC CSW 2.0.2 with a metadataset that is valid a gainst
ISO 19139. The insert will be performed (the dataset is available
through the catalogue) but an exception will be returned saying that the
identifier is not unique (I ensured that it is).
2) I tried to performe a DELETE (after athentication) request as given
below but no dataset has been deleted even if the filter condition
matches for all datasets.
3 ) I did not manage to perform transactions without authentication. I
had a look at the documentation and did not find informations about
deactivating security/authentication.

Can you give me a hint what is wrong?

<?xml version="1.0" encoding="UTF-8"?>
<csw:Transaction service="CSW" version="2.0.2"
xmlns:csw="http://www.opengis.net/cat/csw/2.0.2&quot;
xmlns:gml="http://www.opengis.net/gml&quot;
xmlns:ogc="http://www.opengis.net/ogc&quot;
xmlns:apiso="http://www.opengis.net/cat/csw/apiso/1.0&quot;&gt;
    <csw:Delete>
        <csw:Constraint version="1.1.0">
            <ogc:Filter>
                <ogc:PropertyIsLike wildCard="%" singleChar="_"
escapeChar="/">
                    <ogc:PropertyName>apiso:identifier</ogc:PropertyName>
                    <ogc:Literal>%</ogc:Literal>
                </ogc:PropertyIsLike>
            </ogc:Filter>
        </csw:Constraint>
    </csw:Delete>
</csw:Transaction>

best regards

ANDREAS

--
Dr. Andreas Poth

l a t / l o n GmbH
Aennchenstrasse 19 53177 Bonn, Germany
phone ++49 +228 18496-0 fax ++49 +228 18496-29
http://www.lat-lon.de http://www.deegree.org

Hello Andreas,

2010/8/6 Andreas Poth <poth@anonymised.com>:

Hi,

some days ago I wrote a mail to the list according to some problems with compliancy to OGC CSW and ISO AP specification. Unfortunately there has been no answer. It would be great if somebody could approve that these problems exits or deny it and give me some hints on what I did wrong.

I like to use GeoNetwork (2.4.3) as a OGC CSW but I have two problems
performing transactions on it.
1) After authenticating against the server I send an INSERT request that
is valid against OGC CSW 2.0.2 with a metadataset that is valid a gainst
ISO 19139. The insert will be performed (the dataset is available
through the catalogue) but an exception will be returned saying that the
identifier is not unique (I ensured that it is).
2) I tried to performe a DELETE (after athentication) request as given
below but no dataset has been deleted even if the filter condition
matches for all datasets.

Did you try the test.csw page ?
Testing on current trunk (which should be similar for CSW to 2.4.3 I
think), it looks ok to insert/update/delete records.

3 ) I did not manage to perform transactions without authentication. I
had a look at the documentation and did not find informations about
deactivating security/authentication.

Not sure allowing everybody to add records to your catalogue is a good
idea. In GeoNetwork you need to authenticate to add a metadata record,
if you want to change that, you have to change the code in
csw.services.Transaction and probably change the db constraints also.

Cheers.
Francois

Can you give me a hint what is wrong?

<?xml version="1.0" encoding="UTF-8"?>
<csw:Transaction service="CSW" version="2.0.2"
xmlns:csw="http://www.opengis.net/cat/csw/2.0.2&quot;
xmlns:gml="http://www.opengis.net/gml&quot;
xmlns:ogc="http://www.opengis.net/ogc&quot;
xmlns:apiso="http://www.opengis.net/cat/csw/apiso/1.0&quot;&gt;
<csw:Delete>
<csw:Constraint version="1.1.0">
<ogc:Filter>
<ogc:PropertyIsLike wildCard="%" singleChar="_"
escapeChar="/">
<ogc:PropertyName>apiso:identifier</ogc:PropertyName>
<ogc:Literal>%</ogc:Literal>
</ogc:PropertyIsLike>
</ogc:Filter>
</csw:Constraint>
</csw:Delete>
</csw:Transaction>

best regards

ANDREAS

--
Dr. Andreas Poth

l a t / l o n GmbH
Aennchenstrasse 19 53177 Bonn, Germany
phone ++49 +228 18496-0 fax ++49 +228 18496-29
http://www.lat-lon.de http://www.deegree.org

------------------------------------------------------------------------------
This SF.net email is sponsored by

Make an app they can't live without
Enter the BlackBerry Developer Challenge
http://p.sf.net/sfu/RIM-dev2dev
_______________________________________________
GeoNetwork-users mailing list
GeoNetwork-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-users
GeoNetwork OpenSource is maintained at http://sourceforge.net/projects/geonetwork

Hi,

thanx for fast response

[...]

I like to use GeoNetwork (2.4.3) as a OGC CSW but I have two problems
performing transactions on it.
1) After authenticating against the server I send an INSERT request that
is valid against OGC CSW 2.0.2 with a metadataset that is valid a gainst
ISO 19139. The insert will be performed (the dataset is available
through the catalogue) but an exception will be returned saying that the
identifier is not unique (I ensured that it is).
2) I tried to performe a DELETE (after athentication) request as given
below but no dataset has been deleted even if the filter condition
matches for all datasets.
    

Did you try the test.csw page ?
  

Yes I did; INSERT works without problems but DELETE does not (I tried
several constraints but nothing happend). But I must invoke GeoNetwork
CSW interface with a Java program so I can not use test.csw page

Testing on current trunk (which should be similar for CSW to 2.4.3 I
think), it looks ok to insert/update/delete records.

3 ) I did not manage to perform transactions without authentication. I
had a look at the documentation and did not find informations about
deactivating security/authentication.
    

Not sure allowing everybody to add records to your catalogue is a good
idea. In GeoNetwork you need to authenticate to add a metadata record,
if you want to change that, you have to change the code in
csw.services.Transaction and probably change the db constraints also.
  

This depends on the context. Our customer likes us to develope a CSW
client that not just works with GeoNetworks. It should be able to handle
deegree CSW, terra catalog and other OGC CSW compliant catalogs too. And
this is a bit tricky if we need to integrate specific authentication
mechanisms for different catalogue vendors.
Have you ever thought of seperating security aspects into a facade that
can be pluged in or be left away?

best regards

ANDREAS

Cheers.
Francois

Can you give me a hint what is wrong?

<?xml version="1.0" encoding="UTF-8"?>
<csw:Transaction service="CSW" version="2.0.2"
xmlns:csw="http://www.opengis.net/cat/csw/2.0.2&quot;
xmlns:gml="http://www.opengis.net/gml&quot;
xmlns:ogc="http://www.opengis.net/ogc&quot;
xmlns:apiso="http://www.opengis.net/cat/csw/apiso/1.0&quot;&gt;
   <csw:Delete>
       <csw:Constraint version="1.1.0">
           <ogc:Filter>
               <ogc:PropertyIsLike wildCard="%" singleChar="_"
escapeChar="/">
                   <ogc:PropertyName>apiso:identifier</ogc:PropertyName>
                   <ogc:Literal>%</ogc:Literal>
               </ogc:PropertyIsLike>
           </ogc:Filter>
       </csw:Constraint>
   </csw:Delete>
</csw:Transaction>

best regards

ANDREAS

--
Dr. Andreas Poth

l a t / l o n GmbH
Aennchenstrasse 19 53177 Bonn, Germany
phone ++49 +228 18496-0 fax ++49 +228 18496-29
http://www.lat-lon.de http://www.deegree.org

------------------------------------------------------------------------------
This SF.net email is sponsored by

Make an app they can't live without
Enter the BlackBerry Developer Challenge
http://p.sf.net/sfu/RIM-dev2dev
_______________________________________________
GeoNetwork-users mailing list
GeoNetwork-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-users
GeoNetwork OpenSource is maintained at http://sourceforge.net/projects/geonetwork

--
Dr. Andreas Poth

l a t / l o n GmbH
Aennchenstrasse 19 53177 Bonn, Germany
phone ++49 +228 18496-0 fax ++49 +228 18496-29
http://www.lat-lon.de http://www.deegree.org

Hi,

2010/8/6 Andreas Poth <poth@anonymised.com>:

Hi,

thanx for fast response

[...]

I like to use GeoNetwork (2.4.3) as a OGC CSW but I have two problems
performing transactions on it.
1) After authenticating against the server I send an INSERT request that
is valid against OGC CSW 2.0.2 with a metadataset that is valid a gainst
ISO 19139. The insert will be performed (the dataset is available
through the catalogue) but an exception will be returned saying that the
identifier is not unique (I ensured that it is).
2) I tried to performe a DELETE (after athentication) request as given
below but no dataset has been deleted even if the filter condition
matches for all datasets.

Did you try the test.csw page ?

Yes I did; INSERT works without problems but DELETE does not (I tried
several constraints but nothing happend). But I must invoke GeoNetwork
CSW interface with a Java program so I can not use test.csw page

Testing on current trunk (which should be similar for CSW to 2.4.3 I
think), it looks ok to insert/update/delete records.

Tested on 2.4.3 in test.csw user interface and it looks good to me.
Delete by uuid or using filters like
   <ogc:PropertyIsLike wildCard="%" singleChar="_" escape="/">
                    <ogc:PropertyName>apiso:title</ogc:PropertyName>
                    <ogc:Literal>MUNICIPALITIES</ogc:Literal>
                </ogc:PropertyIsLike>
works well.

So calling operation from your Java program should be able to work as well.

3 ) I did not manage to perform transactions without authentication. I
had a look at the documentation and did not find informations about
deactivating security/authentication.

Not sure allowing everybody to add records to your catalogue is a good
idea. In GeoNetwork you need to authenticate to add a metadata record,
if you want to change that, you have to change the code in
csw.services.Transaction and probably change the db constraints also.

This depends on the context. Our customer likes us to develope a CSW
client that not just works with GeoNetworks. It should be able to handle
deegree CSW, terra catalog and other OGC CSW compliant catalogs too. And
this is a bit tricky if we need to integrate specific authentication
mechanisms for different catalogue vendors.

Yep but having public write access to your CSW server is not so good also.
So you need to authenticate in some way, and that's not part of the
CSW spec (like adding privileges, groups, categories which are
features we have when adding a record). Only the 'Inserted metadata is
public" option added by Jose, will make your CSW transaction metadata
records public by default.

Have you ever thought of seperating security aspects into a facade that
can be pluged in or be left away?

You can do that for all GeoNetwork (Jeeves) services using
user-profiles.xml configuration. But csw service is public, but you
need to be a known user to do Transaction operation for the time
being.

Cheers.
Francois

best regards

ANDREAS

Cheers.
Francois

Can you give me a hint what is wrong?

<?xml version="1.0" encoding="UTF-8"?>
<csw:Transaction service="CSW" version="2.0.2"
xmlns:csw="http://www.opengis.net/cat/csw/2.0.2&quot;
xmlns:gml="http://www.opengis.net/gml&quot;
xmlns:ogc="http://www.opengis.net/ogc&quot;
xmlns:apiso="http://www.opengis.net/cat/csw/apiso/1.0&quot;&gt;
<csw:Delete>
<csw:Constraint version="1.1.0">
<ogc:Filter>
<ogc:PropertyIsLike wildCard="%" singleChar="_"
escapeChar="/">
<ogc:PropertyName>apiso:identifier</ogc:PropertyName>
<ogc:Literal>%</ogc:Literal>
</ogc:PropertyIsLike>
</ogc:Filter>
</csw:Constraint>
</csw:Delete>
</csw:Transaction>

best regards

ANDREAS

--
Dr. Andreas Poth

l a t / l o n GmbH
Aennchenstrasse 19 53177 Bonn, Germany
phone ++49 +228 18496-0 fax ++49 +228 18496-29
http://www.lat-lon.de http://www.deegree.org

------------------------------------------------------------------------------
This SF.net email is sponsored by

Make an app they can't live without
Enter the BlackBerry Developer Challenge
http://p.sf.net/sfu/RIM-dev2dev
_______________________________________________
GeoNetwork-users mailing list
GeoNetwork-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-users
GeoNetwork OpenSource is maintained at http://sourceforge.net/projects/geonetwork

--
Dr. Andreas Poth

l a t / l o n GmbH
Aennchenstrasse 19 53177 Bonn, Germany
phone ++49 +228 18496-0 fax ++49 +228 18496-29
http://www.lat-lon.de http://www.deegree.org

  I apologize for interjecting with a question to Andreas and Francois.
Do you know of any efforts or have suggestion for some form of standardized authentication for CSW?
We are running into similar authentication problems when trying to federate various CSW services (including ArcGIS GeoPortal ).

Ciao, Wolfgang

_______________________________
Wolfgang Grunberg
Arizona Geological Survey
wgrunberg@anonymised.com
520-770-3500

On 8/6/2010 4:32 AM, Andreas Poth wrote:

Hi,

thanx for fast response

[...]

I like to use GeoNetwork (2.4.3) as a OGC CSW but I have two problems
performing transactions on it.
1) After authenticating against the server I send an INSERT request that
is valid against OGC CSW 2.0.2 with a metadataset that is valid a gainst
ISO 19139. The insert will be performed (the dataset is available
through the catalogue) but an exception will be returned saying that the
identifier is not unique (I ensured that it is).
2) I tried to performe a DELETE (after athentication) request as given
below but no dataset has been deleted even if the filter condition
matches for all datasets.

Did you try the test.csw page ?

Yes I did; INSERT works without problems but DELETE does not (I tried
several constraints but nothing happend). But I must invoke GeoNetwork
CSW interface with a Java program so I can not use test.csw page

Testing on current trunk (which should be similar for CSW to 2.4.3 I
think), it looks ok to insert/update/delete records.

3 ) I did not manage to perform transactions without authentication. I
had a look at the documentation and did not find informations about
deactivating security/authentication.

Not sure allowing everybody to add records to your catalogue is a good
idea. In GeoNetwork you need to authenticate to add a metadata record,
if you want to change that, you have to change the code in
csw.services.Transaction and probably change the db constraints also.

This depends on the context. Our customer likes us to develope a CSW
client that not just works with GeoNetworks. It should be able to handle
deegree CSW, terra catalog and other OGC CSW compliant catalogs too. And
this is a bit tricky if we need to integrate specific authentication
mechanisms for different catalogue vendors.
Have you ever thought of seperating security aspects into a facade that
can be pluged in or be left away?

best regards

ANDREAS

Cheers.
Francois

Can you give me a hint what is wrong?

<?xml version="1.0" encoding="UTF-8"?>
<csw:Transaction service="CSW" version="2.0.2"
xmlns:csw="http://www.opengis.net/cat/csw/2.0.2&quot;
xmlns:gml="http://www.opengis.net/gml&quot;
xmlns:ogc="http://www.opengis.net/ogc&quot;
xmlns:apiso="http://www.opengis.net/cat/csw/apiso/1.0&quot;&gt;
    <csw:Delete>
        <csw:Constraint version="1.1.0">
            <ogc:Filter>
                <ogc:PropertyIsLike wildCard="%" singleChar="_"
escapeChar="/">
                    <ogc:PropertyName>apiso:identifier</ogc:PropertyName>
                    <ogc:Literal>%</ogc:Literal>
                </ogc:PropertyIsLike>
            </ogc:Filter>
        </csw:Constraint>
    </csw:Delete>
</csw:Transaction>

best regards

ANDREAS

--
Dr. Andreas Poth

l a t / l o n GmbH
Aennchenstrasse 19 53177 Bonn, Germany
phone ++49 +228 18496-0 fax ++49 +228 18496-29
http://www.lat-lon.de http://www.deegree.org

------------------------------------------------------------------------------
This SF.net email is sponsored by

Make an app they can't live without
Enter the BlackBerry Developer Challenge
http://p.sf.net/sfu/RIM-dev2dev
_______________________________________________
GeoNetwork-users mailing list
GeoNetwork-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-users
GeoNetwork OpenSource is maintained at http://sourceforge.net/projects/geonetwork

Hi Wolfgang,

indeed authentication - not just with CSW - is a tricky thing because
OGC has not standarized it anyhow. This year we took part on a
interoperability project of the OGC where different authentication
mechnism has been tested but even if the project has been finished for
several month there is no final report :frowning: So I am afraid there still
will be no accepted standard on authentication in context of geo
services for the next years.
In germany we had an interoperability project for a regional SDI where a
kind of security facade has been standarized that is implemented by
several germany companies but it is just a local solution. The general
idea has been used to defined deegree owsProxy and 52 north security
service. The basic idea is to seperate security layer from protected
services. This means deegree owsProxy can be used with deegree CSW,
terra catalog, ArcGIS WMS, geoserver WFS etc.; 52 north security service
works similar to this. But the general problem of authentication
remains. One of the benifits of a seperate security layer is that you
can leave it away to create a situation where different clients are able
to work with different services without implementing special
authentication mechanisms for each service.

So, for a generic client a solution like the one of GeoNetwork
integrating security into the CSW is problematic because even if HTTP
Basic authetication is easy to do (@Armin with my GeoNetwork
installation it does not work) other services and security layers may
use other mechanism ...

best regards

ANDREAS

Wolfgang Grunberg schrieb:

  I apologize for interjecting with a question to Andreas and Francois.
Do you know of any efforts or have suggestion for some form of
standardized authentication for CSW?
We are running into similar authentication problems when trying to
federate various CSW services (including ArcGIS GeoPortal ).

Ciao, Wolfgang

_______________________________
Wolfgang Grunberg
Arizona Geological Survey
wgrunberg@anonymised.com
520-770-3500

On 8/6/2010 4:32 AM, Andreas Poth wrote:
  

Hi,

thanx for fast response

[...]
    

I like to use GeoNetwork (2.4.3) as a OGC CSW but I have two problems
performing transactions on it.
1) After authenticating against the server I send an INSERT request that
is valid against OGC CSW 2.0.2 with a metadataset that is valid a gainst
ISO 19139. The insert will be performed (the dataset is available
through the catalogue) but an exception will be returned saying that the
identifier is not unique (I ensured that it is).
2) I tried to performe a DELETE (after athentication) request as given
below but no dataset has been deleted even if the filter condition
matches for all datasets.

Did you try the test.csw page ?

Yes I did; INSERT works without problems but DELETE does not (I tried
several constraints but nothing happend). But I must invoke GeoNetwork
CSW interface with a Java program so I can not use test.csw page

Testing on current trunk (which should be similar for CSW to 2.4.3 I
think), it looks ok to insert/update/delete records.

3 ) I did not manage to perform transactions without authentication. I
had a look at the documentation and did not find informations about
deactivating security/authentication.

Not sure allowing everybody to add records to your catalogue is a good
idea. In GeoNetwork you need to authenticate to add a metadata record,
if you want to change that, you have to change the code in
csw.services.Transaction and probably change the db constraints also.

This depends on the context. Our customer likes us to develope a CSW
client that not just works with GeoNetworks. It should be able to handle
deegree CSW, terra catalog and other OGC CSW compliant catalogs too. And
this is a bit tricky if we need to integrate specific authentication
mechanisms for different catalogue vendors.
Have you ever thought of seperating security aspects into a facade that
can be pluged in or be left away?

best regards

ANDREAS

Cheers.
Francois

Can you give me a hint what is wrong?

<?xml version="1.0" encoding="UTF-8"?>
<csw:Transaction service="CSW" version="2.0.2"
xmlns:csw="http://www.opengis.net/cat/csw/2.0.2&quot;
xmlns:gml="http://www.opengis.net/gml&quot;
xmlns:ogc="http://www.opengis.net/ogc&quot;
xmlns:apiso="http://www.opengis.net/cat/csw/apiso/1.0&quot;&gt;
    <csw:Delete>
        <csw:Constraint version="1.1.0">
            <ogc:Filter>
                <ogc:PropertyIsLike wildCard="%" singleChar="_"
escapeChar="/">
                    <ogc:PropertyName>apiso:identifier</ogc:PropertyName>
                    <ogc:Literal>%</ogc:Literal>
                </ogc:PropertyIsLike>
            </ogc:Filter>
        </csw:Constraint>
    </csw:Delete>
</csw:Transaction>

best regards

ANDREAS

--
Dr. Andreas Poth

l a t / l o n GmbH
Aennchenstrasse 19 53177 Bonn, Germany
phone ++49 +228 18496-0 fax ++49 +228 18496-29
http://www.lat-lon.de http://www.deegree.org

------------------------------------------------------------------------------
This SF.net email is sponsored by

Make an app they can't live without
Enter the BlackBerry Developer Challenge
http://p.sf.net/sfu/RIM-dev2dev
_______________________________________________
GeoNetwork-users mailing list
GeoNetwork-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-users
GeoNetwork OpenSource is maintained at http://sourceforge.net/projects/geonetwork

------------------------------------------------------------------------------
This SF.net email is sponsored by

Make an app they can't live without
Enter the BlackBerry Developer Challenge
http://p.sf.net/sfu/RIM-dev2dev
_______________________________________________
GeoNetwork-users mailing list
GeoNetwork-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-users
GeoNetwork OpenSource is maintained at http://sourceforge.net/projects/geonetwork
  
--
Dr. Andreas Poth

l a t / l o n GmbH
Aennchenstrasse 19 53177 Bonn, Germany
phone ++49 +228 18496-0 fax ++49 +228 18496-29
http://www.lat-lon.de http://www.deegree.org

  Thank you Andreas and Armin for the feedback!
Thankfully, we are struggling enough with legacy metadata and consistent CSW services to not have to tackle authentication yet :wink:
Ciao, Wolfgang

_______________________________
Wolfgang Grunberg
Arizona Geological Survey
wgrunberg@anonymised.com
520-770-3500

On 8/9/2010 7:20 AM, Andreas Poth wrote:

Hi Wolfgang,

indeed authentication - not just with CSW - is a tricky thing because
OGC has not standarized it anyhow. This year we took part on a
interoperability project of the OGC where different authentication
mechnism has been tested but even if the project has been finished for
several month there is no final report :frowning: So I am afraid there still
will be no accepted standard on authentication in context of geo
services for the next years.
In germany we had an interoperability project for a regional SDI where a
kind of security facade has been standarized that is implemented by
several germany companies but it is just a local solution. The general
idea has been used to defined deegree owsProxy and 52 north security
service. The basic idea is to seperate security layer from protected
services. This means deegree owsProxy can be used with deegree CSW,
terra catalog, ArcGIS WMS, geoserver WFS etc.; 52 north security service
works similar to this. But the general problem of authentication
remains. One of the benifits of a seperate security layer is that you
can leave it away to create a situation where different clients are able
to work with different services without implementing special
authentication mechanisms for each service.

So, for a generic client a solution like the one of GeoNetwork
integrating security into the CSW is problematic because even if HTTP
Basic authetication is easy to do (@Armin with my GeoNetwork
installation it does not work) other services and security layers may
use other mechanism ...

best regards

ANDREAS

Wolfgang Grunberg schrieb:

   I apologize for interjecting with a question to Andreas and Francois.
Do you know of any efforts or have suggestion for some form of
standardized authentication for CSW?
We are running into similar authentication problems when trying to
federate various CSW services (including ArcGIS GeoPortal ).

Ciao, Wolfgang

_______________________________
Wolfgang Grunberg
Arizona Geological Survey
wgrunberg@anonymised.com
520-770-3500

On 8/6/2010 4:32 AM, Andreas Poth wrote:

Hi,

thanx for fast response

[...]

I like to use GeoNetwork (2.4.3) as a OGC CSW but I have two problems
performing transactions on it.
1) After authenticating against the server I send an INSERT request that
is valid against OGC CSW 2.0.2 with a metadataset that is valid a gainst
ISO 19139. The insert will be performed (the dataset is available
through the catalogue) but an exception will be returned saying that the
identifier is not unique (I ensured that it is).
2) I tried to performe a DELETE (after athentication) request as given
below but no dataset has been deleted even if the filter condition
matches for all datasets.

Did you try the test.csw page ?

Yes I did; INSERT works without problems but DELETE does not (I tried
several constraints but nothing happend). But I must invoke GeoNetwork
CSW interface with a Java program so I can not use test.csw page

Testing on current trunk (which should be similar for CSW to 2.4.3 I
think), it looks ok to insert/update/delete records.

3 ) I did not manage to perform transactions without authentication. I
had a look at the documentation and did not find informations about
deactivating security/authentication.

Not sure allowing everybody to add records to your catalogue is a good
idea. In GeoNetwork you need to authenticate to add a metadata record,
if you want to change that, you have to change the code in
csw.services.Transaction and probably change the db constraints also.

This depends on the context. Our customer likes us to develope a CSW
client that not just works with GeoNetworks. It should be able to handle
deegree CSW, terra catalog and other OGC CSW compliant catalogs too. And
this is a bit tricky if we need to integrate specific authentication
mechanisms for different catalogue vendors.
Have you ever thought of seperating security aspects into a facade that
can be pluged in or be left away?

best regards

ANDREAS

Cheers.
Francois

Can you give me a hint what is wrong?

<?xml version="1.0" encoding="UTF-8"?>
<csw:Transaction service="CSW" version="2.0.2"
xmlns:csw="http://www.opengis.net/cat/csw/2.0.2&quot;
xmlns:gml="http://www.opengis.net/gml&quot;
xmlns:ogc="http://www.opengis.net/ogc&quot;
xmlns:apiso="http://www.opengis.net/cat/csw/apiso/1.0&quot;&gt;
     <csw:Delete>
         <csw:Constraint version="1.1.0">
             <ogc:Filter>
                 <ogc:PropertyIsLike wildCard="%" singleChar="_"
escapeChar="/">
                     <ogc:PropertyName>apiso:identifier</ogc:PropertyName>
                     <ogc:Literal>%</ogc:Literal>
                 </ogc:PropertyIsLike>
             </ogc:Filter>
         </csw:Constraint>
     </csw:Delete>
</csw:Transaction>

best regards

ANDREAS

--
Dr. Andreas Poth

l a t / l o n GmbH
Aennchenstrasse 19 53177 Bonn, Germany
phone ++49 +228 18496-0 fax ++49 +228 18496-29
http://www.lat-lon.de http://www.deegree.org

------------------------------------------------------------------------------
This SF.net email is sponsored by

Make an app they can't live without
Enter the BlackBerry Developer Challenge
http://p.sf.net/sfu/RIM-dev2dev
_______________________________________________
GeoNetwork-users mailing list
GeoNetwork-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-users
GeoNetwork OpenSource is maintained at http://sourceforge.net/projects/geonetwork

------------------------------------------------------------------------------
This SF.net email is sponsored by

Make an app they can't live without
Enter the BlackBerry Developer Challenge
http://p.sf.net/sfu/RIM-dev2dev
_______________________________________________
GeoNetwork-users mailing list
GeoNetwork-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-users
GeoNetwork OpenSource is maintained at http://sourceforge.net/projects/geonetwork