[Geoserver-devel] [JIRA] (GEOS-10430) Rest API fails for WMS Store

GeoServer GeoServer Developer
1

Stefan Forsgren created an issue

GeoServer / BugGEOS-10430

Rest API fails for WMS Store

Issue Type:

BugBug

Affects Versions:

2.20.2

Assignee:

Unassigned

Components:

REST

Created:

23/Mar/22 9:24 AM

Priority:

MediumMedium

Reporter:

Stefan Forsgren

Under certain circumstances the rest api returns Could not find a security wrapper for class class org.geoserver.catalog.impl.WMSStoreInfoImpl, cannot secure the object when performing a GET operation on /rest/workspaces

Steps to reprocude:

  1. Create a WMS store inside a workspace
  2. Publish a layer from the WMS store
  3. Change data security catalog setting to challenge
  4. Create a user in a role that does NOT have access to the layer
  5. Configure rest api to allow the created role to be allowed to perform GET on rest api in rest.properties
  6. Perform a GET on /rest/workspaces

The error also occurs when performing GET on /rest/workspaces/<workspace> if the workspace has a wms store. But for other workspaces the call works. If the user also have access to the data it also works.

Also calling GET on the wmsstore definition endpoint throws the error:

http://localhost:8081/geoserver/rest/workspaces/<workspace>/wmsstores.xml

This is an actual problem, as it prevents creating a user with access to only the layer definitions without access to the actual data for API operations which come handy when querying Geoserver for metadata.

Add Comment

Add Comment

Get Jira notifications on your phone! Download the Jira Cloud app for Android or iOS

This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100197-sha1:25554e9)

Atlassian logo