[Geoserver-devel] [JIRA] (GEOS-10715) Workspace Filter for PublishedInfo doesn't work for LayerGroups

David Blasby created an issue

GeoServer / BugGEOS-10715

Workspace Filter for PublishedInfo doesn’t work for LayerGroups

Issue Type:

BugBug

Assignee:

Unassigned

Created:

20/Oct/22 6:43 PM

Priority:

MediumMedium

Reporter:

David Blasby

To reproduce -

a) create a user with only access to NE workspace

b) got to GS Homepage or Layer Preview

c) you would expect to see 5 “layers” - 4 real layers and one LayerGroup (“world”)

d) You don’t see the “world” LayerGroup

Underlying cause is the security filter for the catalog uses layer-specific check ([ resource.store.workspace.name = topp ]) that doesn’t work on a layerGroup.

Solution - use a filter that handles both LayerGroup and Layer - “[[ workspace.name = topp ] OR [ resource.store.workspace.name = topp ]]”

NOTE: one of the test cases (SecureCatalogImplTest#testSecurityFilterComplex) relies on the incorrect behaviour.

Add Comment

Add Comment

Get Jira notifications on your phone! Download the Jira Cloud app for Android or iOS


This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100209-sha1:392b984)

Atlassian logo