Hi,
are there any implementations for GeoXACML in Geoserver?
Quick googling showed that there has been discussions over it at 2009 and 2010 but after that not many. There was even this proposal: http://geoserver.org/display/GEOS/GeoXACML-Integration
Spatial authorization is something that has been asked lately.
On Sat, Aug 24, 2013 at 11:42 AM, <mika@anonymised.com> wrote:
Hi,
are there any implementations for GeoXACML in Geoserver?
Quick googling showed that there has been discussions over it at 2009
and 2010 but after that not many. There was even this proposal: http://geoserver.org/display/GEOS/GeoXACML-Integration
There is code in community land that handles it, but it's outdated and
trying to configure any kind of security in GeoXACML directly is
a crime (could be used as a torture tool, even the simplest thing
makes you write hundreds of lines of XML)
Spatial authorization is something that has been asked lately.
If you care about the result without the need of using a standard, you
might want to have a look at GeoFence, it provides a GUI to setup
complex authorization rules (including spatial ones) and have GeoServer
apply them:
Hi Andrea,
yep, the standard is not the goal but the result. I have to take a look at that GeoFence, thanks.
Dou you have any presentations regarding security subsystems of Geoserver at Nottingham? I've been a little lazy browsing the program.. but will be there on Thursday and Friday.
- mika -
Andrea Aime kirjoitti 2013-08-24 13:30:
On Sat, Aug 24, 2013 at 11:42 AM, <mika@anonymised.com> wrote:
Hi,
are there any implementations for GeoXACML in Geoserver?
Quick googling showed that there has been discussions over it at 2009
and 2010 but after that not many. There was even this proposal: http://geoserver.org/display/GEOS/GeoXACML-Integration [1]
There is code in community land that handles it, but it's outdated and
trying to configure any kind of security in GeoXACML directly is
a crime (could be used as a torture tool, even the simplest thing
makes you write hundreds of lines of XML)
Spatial authorization is something that has been asked lately.
If you care about the result without the need of using a standard, you
might want to have a look at GeoFence, it provides a GUI to setup
complex authorization rules (including spatial ones) and have GeoServer
apply them: https://github.com/geosolutions-it/geofence [2]
On Sat, Aug 24, 2013 at 1:08 PM, <mika@anonymised.com> wrote:
Hi Andrea,
yep, the standard is not the goal but the result. I have to take a look at
that GeoFence, thanks.
Dou you have any presentations regarding security subsystems of Geoserver
at Nottingham? I've been a little lazy browsing the program.. but will be
there on Thursday and Friday.
Yes, we have a presentation about GeoFence on Friday: