[Geoserver-users] Editing Geofence Admin Rules with REST

GeoServer GeoServer User
1

Good day,

Is there any way for editing Geofence Admin Rules with REST API?

Access types ADMIN or USER are not supported in standart rest/rules POST request.

Thanks for help.

···

Marcel Kocisek

2

Ciao Marcel,
I would suggest you to have a look at this link below:
https://github.com/geoserver/geofence/wiki/REST-API
Regards,
Simone Giannecchini

GeoServer Professional Services from the experts!
Visit http://goo.gl/it488V for more information.

Ing. Simone Giannecchini
@simogeo
Founder/Director

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 333 8128928

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

-------------------------------------------------------
AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate.
Il loro utilizzo è consentito esclusivamente al destinatario del
messaggio, per le finalità indicate nel messaggio stesso. Qualora
riceviate questo messaggio senza esserne il destinatario, Vi preghiamo
cortesemente di darcene notizia via e-mail e di procedere alla
distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
Conservare il messaggio stesso, divulgarlo anche in parte,
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità
diverse, costituisce comportamento contrario ai principi dettati dal
D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely
for the attention and use of the named addressee(s) and may be
confidential or proprietary in nature or covered by the provisions of
privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New
Data Protection Code).Any use not in accord with its purpose, any
disclosure, reproduction, copying, distribution, or either
dissemination, either whole or partial, is strictly forbidden except
previous formal approval of the named addressee(s). If you are not the
intended recipient, please contact immediately the sender by
telephone, fax or e-mail and delete the information in this message
that has been received in error. The sender does not give any warranty
or accept liability as the content, accuracy or completeness of sent
messages and accepts no responsibility for changes made after they
were sent or for other risks which arise as a result of e-mail
transmission, viruses, etc.

On Tue, Jun 14, 2016 at 3:15 PM, Marcel Kočíšek
<marcel.kocisek@anonymised.com> wrote:

Good day,

Is there any way for editing Geofence Admin Rules with REST API?

Access types ADMIN or USER are not supported in standart rest/rules POST
request.

Thanks for help.

--
Marcel Kocisek

------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
_______________________________________________
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

3

Hello.

On the webpage is part about Inserting rules, but access ADMIN/USER is missing.

https://github.com/geoserver/geofence/wiki/REST-API#rules-operations

···

On Wed, Jun 15, 2016 at 11:52 AM, Simone Giannecchini <simone.giannecchini@anonymised.com> wrote:

Ciao Marcel,
I would suggest you to have a look at this link below:
https://github.com/geoserver/geofence/wiki/REST-API
Regards,
Simone Giannecchini

GeoServer Professional Services from the experts!
Visit http://goo.gl/it488V for more information.

Ing. Simone Giannecchini
@simogeo
Founder/Director

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 333 8128928

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate.
Il loro utilizzo è consentito esclusivamente al destinatario del
messaggio, per le finalità indicate nel messaggio stesso. Qualora
riceviate questo messaggio senza esserne il destinatario, Vi preghiamo
cortesemente di darcene notizia via e-mail e di procedere alla
distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
Conservare il messaggio stesso, divulgarlo anche in parte,
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità
diverse, costituisce comportamento contrario ai principi dettati dal
D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely
for the attention and use of the named addressee(s) and may be
confidential or proprietary in nature or covered by the provisions of
privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New
Data Protection Code).Any use not in accord with its purpose, any
disclosure, reproduction, copying, distribution, or either
dissemination, either whole or partial, is strictly forbidden except
previous formal approval of the named addressee(s). If you are not the
intended recipient, please contact immediately the sender by
telephone, fax or e-mail and delete the information in this message
that has been received in error. The sender does not give any warranty
or accept liability as the content, accuracy or completeness of sent
messages and accepts no responsibility for changes made after they
were sent or for other risks which arise as a result of e-mail
transmission, viruses, etc.

On Tue, Jun 14, 2016 at 3:15 PM, Marcel Kočíšek
<marcel.kocisek@anonymised.com> wrote:

Good day,

Is there any way for editing Geofence Admin Rules with REST API?

Access types ADMIN or USER are not supported in standart rest/rules POST
request.

Thanks for help.

–
Marcel Kocisek

What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e

Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

–

Marcel Kocisek
ASFAPRA - asfaltérske práce, asfapra@anonymised.com

4

Hi,
could you figure out how to get an "gefence admin rule" configured?

With the embedded geofence and the documented rest api, setting up a user
with "admin=true" did not work for me. I also need to set up a admin role
for a certain user on a single workspace.

Thanks for any suggestion,
Christoph

--
View this message in context: http://osgeo-org.1560.x6.nabble.com/Editing-Geofence-Admin-Rules-with-REST-tp5271576p5279358.html
Sent from the GeoServer - User mailing list archive at Nabble.com.

5

Hi,

What do you mean by "geofence admin rule" ? An user that can do everything for any service, any request, any workspace and any layer ?

If yes, the following request creates such a rule for user "nuno":

curl -u admin:geoserver -H 'Content-Type: application/json' -X POST -d '{"userName": "nuno", "access": "ALLOW"}' 'http://localhost:8080/geoserver/security/rest/rules’

To make user "nuno" only admin in a certain workspace:

curl -u admin:geoserver -H 'Content-Type: application/json' -X POST -d '{"userName": "nuno", "workspace": "tiger", "access": "ALLOW"}' '
http://localhost:8080/geoserver/security/rest/rules’

Regards,

Nuno Oliveira

Le mercredi 03 août 2016 à 12:41 -0700, ceibl a écrit :

Hi,
could you figure out how to get an "gefence admin rule" configured?

With the embedded geofence and the documented rest api, setting up a user
with "admin=true" did not work for me. I also need to set up a admin role
for a certain user on a single workspace.

Thanks for any suggestion,
Christoph

--
View this message in context: http://osgeo-org.1560.x6.nabble.com/Editing-Geofence-Admin-Rules-with-REST-tp5271576p5279358.html
Sent from the GeoServer - User mailing list archive at Nabble.com.

------------------------------------------------------------------------------
_______________________________________________
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

--

GeoServer Professional Services from the experts!
Visit http://goo.gl/it488V for more information.

Nuno Miguel Carvalho Oliveira
@nmcoliveira
Software Engineer

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
Italy

phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 333 8128928

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

-------------------------------------------------------

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono
da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate
nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e
-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo
anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai
principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of
the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree
June, 30 2003, no.196 - Italy's New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying,
distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named
addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the
information in this message that has been received in error. The sender does not give any warranty or accept liability as the content,
accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which
arise as a result of e-mail transmission, viruses, etc.

6

I have installed the geofence server plugin and then there are three new
menu-entries in the geoserver web UI, called "GeoFence", "GeoFence Data
Rules" and "GeoFence Admin Rules".
The command you suggested adds a "GeoFence Data Rule". When I log into the
geoserver after adding this rule, I am able to see only layers of the
specified workspace, but I am not able to add new datasets, layers,
group-layers,...
When I add a similar "GeoFence Admin Rule", in the geoserver-geofence admin
rule page (see screenshot) I am able to add layers, datasets,...
And that is what I would like to through rest, a "GeoFence Admin Rule" to be
able to manage all the content of only one specific workspaces.

Thanks in advance!
Christoph

<http://osgeo-org.1560.x6.nabble.com/file/n5279573/GeoserverGeofenceMenu_and_Admin_rule.png&gt;

--
View this message in context: http://osgeo-org.1560.x6.nabble.com/Editing-Geofence-Admin-Rules-with-REST-tp5271576p5279573.html
Sent from the GeoServer - User mailing list archive at Nabble.com.

7

Is there a provided REST-endpoint for adding "geofence admin rules"?

--
View this message in context: http://osgeo-org.1560.x6.nabble.com/Editing-Geofence-Admin-Rules-with-REST-tp5271576p5279995.html
Sent from the GeoServer - User mailing list archive at Nabble.com.

8

Hi,

Yes you are correct, to allow users or roles to add or remove layers from an workspace you need to create
an 'admin rule', but unfortunately at the moment I don't think you can do that from the REST interface:
http://osgeo-org.1560.x6.nabble.com/Geofence-admin-rule-td5280464.html

Regards,

Nuno Oliveira

Le jeudi 04 août 2016 à 12:03 -0700, ceibl a écrit :

I have installed the geofence server plugin and then there are three new
menu-entries in the geoserver web UI, called "GeoFence", "GeoFence Data
Rules" and "GeoFence Admin Rules".
The command you suggested adds a "GeoFence Data Rule". When I log into the
geoserver after adding this rule, I am able to see only layers of the
specified workspace, but I am not able to add new datasets, layers,
group-layers,...
When I add a similar "GeoFence Admin Rule", in the geoserver-geofence admin
rule page (see screenshot) I am able to add layers, datasets,...
And that is what I would like to through rest, a "GeoFence Admin Rule" to be
able to manage all the content of only one specific workspaces.

Thanks in advance!
Christoph

<http://osgeo-org.1560.x6.nabble.com/file/n5279573/GeoserverGeofenceMenu_and_Admin_rule.png&gt;

--
View this message in context: http://osgeo-org.1560.x6.nabble.com/Editing-Geofence-Admin-Rules-with-REST-tp5271576p5279573.html
Sent from the GeoServer - User mailing list archive at Nabble.com.

------------------------------------------------------------------------------
_______________________________________________
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

--

GeoServer Professional Services from the experts!
Visit http://goo.gl/it488V for more information.

Nuno Miguel Carvalho Oliveira
@nmcoliveira
Software Engineer

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
Italy

phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 333 8128928

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

-------------------------------------------------------

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono
da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate
nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e
-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo
anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai
principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of
the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree
June, 30 2003, no.196 - Italy's New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying,
distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named
addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the
information in this message that has been received in error. The sender does not give any warranty or accept liability as the content,
accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which
arise as a result of e-mail transmission, viruses, etc.