[Geoserver-devel] [JIRA] (GEOS-10682) GeoFence: data access control in WPS calls

[_Failed_to_Retrieve]

Emanuele Tajariol created an issue

GeoServer / GEOS-10682

GeoFence: data access control in WPS calls

Issue Type:	Improvement
Assignee:	Unassigned
Components:	GeoFence
Created:	29/Sep/22 12:12 PM
Priority:	Medium
Reporter:	Emanuele Tajariol

Some WPS processes may be exposing data that should not be accessible, while some other processes should be allowed. For instance, we may want to allow stats computation on a layer (via gs:Aggregate), but disallow data downloading (gs:Download). There’s a full description of this issue on the GeoFence repo at https://github.com/geoserver/geofence/issues/225 In order to implement this feature, we need implemented: https://osgeo-org.atlassian.net/browse/GEOS-10681to be completed, in order to be able to get the info about currently active WPS processes https://github.com/geoserver/geofence/issues/226 : the GeoFence engine should be able to handle the new subfield field. This ticket includes: modify the GeoFenceAccessManager in order to apply the constraints on the requested layer according to the caller processes chain modify the geofence-server module in order to handle the new field in the GUI, in the jaxb beans and in the REST operations.

Add Comment

Get Jira notifications on your phone! Download the Jira Cloud app for Android or iOS

This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100207-sha1:ee9e30a)