Hi,
are there any implementations for GeoXACML in Geoserver?
Quick googling showed that there has been discussions over it at 2009 and 2010 but after that not many. There was even this proposal: http://geoserver.org/display/GEOS/GeoXACML-Integration
Spatial authorization is something that has been asked lately.
- mika -
On Sat, Aug 24, 2013 at 11:42 AM, <mika@anonymised.com> wrote:
Hi,
are there any implementations for GeoXACML in Geoserver?
Quick googling showed that there has been discussions over it at 2009
and 2010 but after that not many. There was even this proposal:
http://geoserver.org/display/GEOS/GeoXACML-Integration
There is code in community land that handles it, but it's outdated and
trying to configure any kind of security in GeoXACML directly is
a crime (could be used as a torture tool, even the simplest thing
makes you write hundreds of lines of XML)
Spatial authorization is something that has been asked lately.
If you care about the result without the need of using a standard, you
might want to have a look at GeoFence, it provides a GUI to setup
complex authorization rules (including spatial ones) and have GeoServer
apply them:
https://github.com/geosolutions-it/geofence
Cheers
Andrea
Ing. Andrea Aime
@geowolf
Technical Lead
GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549
http://www.geo-solutions.it
http://twitter.com/geosolutions_it
-------------------------------------------------------
Hi Andrea,
yep, the standard is not the goal but the result. I have to take a look at that GeoFence, thanks.
Dou you have any presentations regarding security subsystems of Geoserver at Nottingham? I've been a little lazy browsing the program.. but will be there on Thursday and Friday. 
- mika -
Andrea Aime kirjoitti 2013-08-24 13:30:
On Sat, Aug 24, 2013 at 11:42 AM, <mika@anonymised.com> wrote:
Hi,
are there any implementations for GeoXACML in Geoserver?
Quick googling showed that there has been discussions over it at 2009
and 2010 but after that not many. There was even this proposal:
http://geoserver.org/display/GEOS/GeoXACML-Integration [1]There is code in community land that handles it, but it's outdated and
trying to configure any kind of security in GeoXACML directly is
a crime (could be used as a torture tool, even the simplest thing
makes you write hundreds of lines of XML)Spatial authorization is something that has been asked lately.
If you care about the result without the need of using a standard, you
might want to have a look at GeoFence, it provides a GUI to setup
complex authorization rules (including spatial ones) and have GeoServer
apply them:
https://github.com/geosolutions-it/geofence [2]Cheers
Andrea--
==
Our support, Your Success! Visit http://opensdi.geo-solutions.it [3]
for more information.Ing. Andrea Aime
@geowolf
Technical LeadGeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549http://www.geo-solutions.it [4]
http://twitter.com/geosolutions_it [5]-------------------------------------------------------
Links:
------
[1] http://geoserver.org/display/GEOS/GeoXACML-Integration
[2] https://github.com/geosolutions-it/geofence
[3] http://opensdi.geo-solutions.it
[4] http://www.geo-solutions.it
[5] http://twitter.com/geosolutions_it
On Sat, Aug 24, 2013 at 1:08 PM, <mika@anonymised.com> wrote:
Hi Andrea,
yep, the standard is not the goal but the result. I have to take a look at
that GeoFence, thanks.
Dou you have any presentations regarding security subsystems of Geoserver
at Nottingham? I've been a little lazy browsing the program.. but will be
there on Thursday and Friday.
Yes, we have a presentation about GeoFence on Friday:
http://2013.foss4g.org/conf/programme/presentations/13/
Cheers
Andrea
Ing. Andrea Aime
@geowolf
Technical Lead
GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549
http://www.geo-solutions.it
http://twitter.com/geosolutions_it
-------------------------------------------------------