[Geoserver-devel] blog post for 2.0.1 rest security changes

GeoServer GeoServer Developer
1

Hi all,

Here is a quick blog post I did up describing the rest security changes for 2.0.1.

http://blog.geoserver.org/?p=438&preview=true

If someone could review that would be great. Thanks.

-Justin

--
Justin Deoliveira
OpenGeo - http://opengeo.org
Enterprise support for open source geospatial.

2

Justin Deoliveira ha scritto:

Hi all,

Here is a quick blog post I did up describing the rest security changes for 2.0.1.

http://blog.geoserver.org/?p=438&preview=true

If someone could review that would be great. Thanks.

Looks good, only one thing: by the looks of it, it would seem
that it was also giving away the GS users own credentials.
Afaik we don't have a REST service to manage users, or do we?

Maybe make it clear that the credentials were the store
access ones

Cheers
Andrea

--
Andrea Aime
OpenGeo - http://opengeo.org
Enterprise support for open source geospatial.

3

On 1/26/10 10:44 AM, Andrea Aime wrote:

Justin Deoliveira ha scritto:

Hi all,

Here is a quick blog post I did up describing the rest security
changes for 2.0.1.

http://blog.geoserver.org/?p=438&preview=true

If someone could review that would be great. Thanks.

Looks good, only one thing: by the looks of it, it would seem
that it was also giving away the GS users own credentials.
Afaik we don't have a REST service to manage users, or do we?

Maybe make it clear that the credentials were the store
access ones

Good point, I will change that to be more explicit. Thanks for the review.

Cheers
Andrea

--
Justin Deoliveira
OpenGeo - http://opengeo.org
Enterprise support for open source geospatial.