[Geoserver-users] About to csw integration on geoserver

GeoServer GeoServer User
1

Hi.
I did install the plugin csw on my geoserver.
I’d like to limit csw responses to features enabled on geoserver to logged user.
Is it posible?

TIA
jorge infante
rosario - santa fe - argentina

2

On Mon, May 2, 2016 at 1:20 PM, Jorge Infante <joluinfante@anonymised.com> wrote:

Hi.
I did install the plugin csw on my geoserver.
I'd like to limit csw responses to features enabled on geoserver to logged
user.
Is it posible?

You mean, to layers enabled in GeoServer the logged user?
If so, that should be the default behavior (I have not tried personally
though, mind),
at least with the catalog set in "HIDE" mode.

Cheers
Andrea

--

GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

*AVVERTENZE AI SENSI DEL D.Lgs. 196/2003*

Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il
loro utilizzo è consentito esclusivamente al destinatario del messaggio,
per le finalità indicate nel messaggio stesso. Qualora riceviate questo
messaggio senza esserne il destinatario, Vi preghiamo cortesemente di
darcene notizia via e-mail e di procedere alla distruzione del messaggio
stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso,
divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od
utilizzarlo per finalità diverse, costituisce comportamento contrario ai
principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for
the attention and use of the named addressee(s) and may be confidential or
proprietary in nature or covered by the provisions of privacy act
(Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection
Code).Any use not in accord with its purpose, any disclosure, reproduction,
copying, distribution, or either dissemination, either whole or partial, is
strictly forbidden except previous formal approval of the named
addressee(s). If you are not the intended recipient, please contact
immediately the sender by telephone, fax or e-mail and delete the
information in this message that has been received in error. The sender
does not give any warranty or accept liability as the content, accuracy or
completeness of sent messages and accepts no responsibility for changes
made after they were sent or for other risks which arise as a result of
e-mail transmission, viruses, etc.

-------------------------------------------------------

3

Hi.
Thanks for your response.

If I use the web application to access to geoserver, this works ok. The user not enable to see a layer can’t see it. I have the setting “Catalog mode=hide”.
But, if I try to access from a python script (from a client), I can see the title of layer.

I’m logging to geoserver with:
r=sess.post(“http://”+ip+“:8080/geoserver/j_spring_security_check”, data={‘username’: user, ‘password’: pwd})

I’m trying to access to layers with:
r=sess.post(“http://”+ip+“:8080/geoserver/csw?service=csw&version=2.0.2&request=GetDomain&propertyName=Title”, data={‘username’: user, ‘password’: pwd})

I’m receiving the title of all layers.

···

2016-05-02 8:46 GMT-03:00 Andrea Aime <andrea.aime@anonymised.com>:

On Mon, May 2, 2016 at 1:20 PM, Jorge Infante <joluinfante@anonymised.com> wrote:

Hi.
I did install the plugin csw on my geoserver.
I’d like to limit csw responses to features enabled on geoserver to logged user.
Is it posible?

You mean, to layers enabled in GeoServer the logged user?
If so, that should be the default behavior (I have not tried personally though, mind),
at least with the catalog set in “HIDE” mode.

Cheers
Andrea

–

==
GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Ing. Andrea Aime

@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313

fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.

4

Hi Jorge,
not sure what’s going on there (I did not work on the csw/internal catalog integration myself, not sure how it works).

Might be worth opening a bug report, best if you can provide instructions to reproduce using
the default data directory and curl requests on the command line

Cheers
Andrea

···

On Mon, May 2, 2016 at 1:57 PM, Jorge Infante <joluinfante@anonymised.com> wrote:

Hi.
Thanks for your response.

If I use the web application to access to geoserver, this works ok. The user not enable to see a layer can’t see it. I have the setting “Catalog mode=hide”.
But, if I try to access from a python script (from a client), I can see the title of layer.

I’m logging to geoserver with:
r=sess.post(“http://”+ip+“:8080/geoserver/j_spring_security_check”, data={‘username’: user, ‘password’: pwd})

I’m trying to access to layers with:
r=sess.post(“http://”+ip+“:8080/geoserver/csw?service=csw&version=2.0.2&request=GetDomain&propertyName=Title”, data={‘username’: user, ‘password’: pwd})

I’m receiving the title of all layers.

–

2016-05-02 8:46 GMT-03:00 Andrea Aime <andrea.aime@anonymised.com>:

On Mon, May 2, 2016 at 1:20 PM, Jorge Infante <joluinfante@anonymised.com> wrote:

Hi.
I did install the plugin csw on my geoserver.
I’d like to limit csw responses to features enabled on geoserver to logged user.
Is it posible?

You mean, to layers enabled in GeoServer the logged user?
If so, that should be the default behavior (I have not tried personally though, mind),
at least with the catalog set in “HIDE” mode.

Cheers
Andrea

–

==
GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Ing. Andrea Aime

@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313

fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.

==
GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Ing. Andrea Aime

@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313

fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.

5

Ok. Thanks for your response.
I did check the source, I’m not sure if csw extension is seeing internal store to get me the information.
In http://docs.geoserver.org/2.8.x/en/user/extensions/csw/features.html, I see “set the Java system property DefaultCatalogStore to make sure that the correct catalog store will be used”. I did put -DDefaultCatalogStore=org.geoserver.csw.store.internal.GeoServerInternalCatalogStore in the startup.sh script, and, It’s not working. I’m thinking the csw extension are using the simple catalog.

Another question: I’m using the internal csw extension of geoserver, but, I did see the GeoNetwork product to process csw request, connected to GeoServer. What is the must appropiate component to listen csw request? I’m trying to use a centralized administration of layers (I’m using ldap integration to doit).

TIA
jorge infante

···

2016-05-02 9:06 GMT-03:00 Andrea Aime <andrea.aime@anonymised.com>:

Hi Jorge,
not sure what’s going on there (I did not work on the csw/internal catalog integration myself, not sure how it works).

Might be worth opening a bug report, best if you can provide instructions to reproduce using
the default data directory and curl requests on the command line

Cheers

Andrea

On Mon, May 2, 2016 at 1:57 PM, Jorge Infante <joluinfante@anonymised.com> wrote:

Hi.
Thanks for your response.

If I use the web application to access to geoserver, this works ok. The user not enable to see a layer can’t see it. I have the setting “Catalog mode=hide”.
But, if I try to access from a python script (from a client), I can see the title of layer.

I’m logging to geoserver with:
r=sess.post(“http://”+ip+“:8080/geoserver/j_spring_security_check”, data={‘username’: user, ‘password’: pwd})

I’m trying to access to layers with:
r=sess.post(“http://”+ip+“:8080/geoserver/csw?service=csw&version=2.0.2&request=GetDomain&propertyName=Title”, data={‘username’: user, ‘password’: pwd})

I’m receiving the title of all layers.

–

==
GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Ing. Andrea Aime

@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313

fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.

2016-05-02 8:46 GMT-03:00 Andrea Aime <andrea.aime@anonymised.com>:

On Mon, May 2, 2016 at 1:20 PM, Jorge Infante <joluinfante@anonymised.com> wrote:

Hi.
I did install the plugin csw on my geoserver.
I’d like to limit csw responses to features enabled on geoserver to logged user.
Is it posible?

You mean, to layers enabled in GeoServer the logged user?
If so, that should be the default behavior (I have not tried personally though, mind),
at least with the catalog set in “HIDE” mode.

Cheers
Andrea

–

==
GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Ing. Andrea Aime

@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313

fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.