I have locked geoserver with following rules:
..r=NO_ONE
..w=NO_ONE
And for one layer in workspace added read and write rules for users: admin and user1.
workspace.layerA.r=READ,ADMIN,GROUP_ADMIN
workspace.layerA.w=WRITE,ADMIN,GROUP_ADMIN
From geoexplorer with user admin I can log in, add this layer and modify it.
But if I log in with user1 – I can add it, but edit button is inactive.
After some investigation find out that for user1 for DescribeFeatureType request (http://geoserver:8080/geoserver/wfs?&SERVICE=WFS&VERSION=1.1.0&REQUEST=DescribeFeatureType&TYPENAME=workspace%3layerA)
The following exeption appears:
<ows:ExceptionReport xmlns:ows=“http://www.opengis.net/ows” xmlns:xsi=“http://www.w3.org/2001/XMLSchema-instance” version=“1.0.0” xsi:schemaLocation=“http://www.opengis.net/ows http://geoserver:8080/geoserver/schemas/ows/1.0.0/owsExceptionReport.xsd”>
<ows:Exception exceptionCode=“NoApplicableCode”>
ows:ExceptionTextCould not find type: layerA.
Strict WFS protocol conformance is being applied.
Make sure the type name is correctly qualified</ows:ExceptionText>
</ows:Exception>
</ows:ExceptionReport>
With admin no exception.
If I change the lock rule from ..r = NO_ONE to ..r=* I can edit that layer with user1.
So the question would be why request for DescribeFeatureType does not responds correctly if user can read that layer? Am I missing something?
Geoserver 2.4.5 java 1.6 x32 on Windows server 2008 x64
Thanks for any help
Pagarbiai,
Paulius Litvinas
GIS konsultantas
 |
S. Žukausko g. 17, LT-08234 Vilnius, Lietuva |
 |
Tel. + 370 5 278 8456 Mob. +370 656 10 089 |
 |
paulius@…4984… www.infoera.lt |
|---|
