The security code only checks for layers, so when a layer group is provided, it will claim the layer does not exist.
Easy to reproduce in a vanilla GeoServer by enabling data security in caching defaults, go to tile layers, open the OL preview of spearfish.
12 feb 10:10:52 ERROR [geoserver.ows] -
org.geotools.ows.ServiceException: Could not find layer spearfish
at org.geoserver.gwc.GWC.verifyAccessLayer(GWC.java:2055)
at org.geoserver.gwc.dispatch.GwcServiceProxy.verifyAccess(GwcServiceProxy.java:146)
at org.geoserver.gwc.dispatch.GwcServiceProxy.dispatch(GwcServiceProxy.java:95)
at sun.reflect.GeneratedMethodAccessor188.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.geoserver.ows.Dispatcher.execute(Dispatcher.java:845)
at org.geoserver.ows.Dispatcher.handleRequestInternal(Dispatcher.java:275)
at org.springframework.web.servlet.mvc.AbstractController.handleRequest(AbstractController.java:153)
at org.springframework.web.servlet.mvc.SimpleControllerHandlerAdapter.handle(SimpleControllerHandlerAdapter.java:48)
at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:923)
at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:852)
at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:882)
at org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:778)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:707)
|