[Geoserver-devel] [jira] (GEOS-5290) WFS DescribeLayer isn't working with authenticated user and restricted access

GeoServer GeoServer Developer
,
1

lars lingner created BugGEOS-5290
WFS DescribeLayer isn’t working with authenticated user and restricted access

Issue Type:

BugBug

Affects Versions:

2.2-RC2

Assignee:

Andrea Aime

Attachments:

npe_wfs_describelayer.txt

Components:

Security, WFS

Created:

30/Aug/12 5:03 AM

Description:

Quote from mailing list posting:

I have an issue configuring the security system of GeoServer 2.2-beta2 / 2.2-RC2.

What I want: Only authorized user should access WMS and WFS. Depending
on a role only some layers are accessible read only and/or writable.

Data access rules like workspace.layername.r and workspace.layername.w
have been assigned to the roles.

It is working so far, that the testuser can only see the layers he
should see. The admin user (no restrictions) can see everything.

As soon as I do a DescribeFeatureType with the testuser I’m getting a
NullPointerException. The same Request as admin user is working fine.

The datas are coming from a Postgis store, but it is reproducible also
with a fresh installation and the spearfish data set.

The Request:
geoserver/wfs/WfsDispatcher?&SERVICE=WFS&VERSION=1.1.0&REQUEST=DescribeFeatureType&TYPENAME=workspace:layername

The response is attached.

Lars

Environment:

Centos / Ubuntu, Sun Microsystems Inc.: 1.6.0_24 (OpenJDK 64-Bit Server VM), Tomcat6, Git Repository Revision
3fa30219978d4970cad308a59d14880742e1de36, GeoTools Version
8.0 (rev 22bdd1d4de8208178c7975ef29247bd197f73a33)

Project:

GeoServer

Priority:

MajorMajor

Reporter:

lars lingner
This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your [JIRA administrators](https://jira.codehaus.org/secure/ContactAdministrators!default.jspa). For more information on JIRA, see: [http://www.atlassian.com/software/jira](http://www.atlassian.com/software/jira)