[Geoserver-users] Geoserver layer security with AOI and time

GeoServer GeoServer User
1

Dear list,

I looked through the archive but didn't find suitable information.
I have a GeoServer 2.7.1.1 running and would like to extend security settings. I read about the "Layer Security" in the GeoServer User Manual which is already a very good feature. But I am wondering if it is also possible to restrict access
* to certain AOI for example via a defined polygon
* to certain time interval (as I have layers with time parameter)

One thing I found in the web is to install a proxy server like 'mapproxy' to handle this kind of requirements.
Does somebody has experience with this topic and can give some recommendation?

Thanks,
Sabine Ohlendorf

2

On Fri, Feb 12, 2016 at 11:57 AM, Sabine Ohlendorf <sabine.ohlendorf@anonymised.com...>
wrote:

Dear list,

I looked through the archive but didn't find suitable information.
I have a GeoServer 2.7.1.1 running and would like to extend security
settings. I read about the "Layer Security" in the GeoServer User Manual
which is already a very good feature. But I am wondering if it is also
possible to restrict access
* to certain AOI for example via a defined polygon
* to certain time interval (as I have layers with time parameter)

I would suggest to try the GeoFence plugin, it can setup both types of
filter. The second it won't be an explicit dimension filter, but
you can setup a CQL filter that will have the same effect on most layer
(probably not on stand alone NetCDF layers,
but if it's a vector layer, or an image mosaic, it should work.

Cheers
Andrea

--

GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

*AVVERTENZE AI SENSI DEL D.Lgs. 196/2003*

Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il
loro utilizzo è consentito esclusivamente al destinatario del messaggio,
per le finalità indicate nel messaggio stesso. Qualora riceviate questo
messaggio senza esserne il destinatario, Vi preghiamo cortesemente di
darcene notizia via e-mail e di procedere alla distruzione del messaggio
stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso,
divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od
utilizzarlo per finalità diverse, costituisce comportamento contrario ai
principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for
the attention and use of the named addressee(s) and may be confidential or
proprietary in nature or covered by the provisions of privacy act
(Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection
Code).Any use not in accord with its purpose, any disclosure, reproduction,
copying, distribution, or either dissemination, either whole or partial, is
strictly forbidden except previous formal approval of the named
addressee(s). If you are not the intended recipient, please contact
immediately the sender by telephone, fax or e-mail and delete the
information in this message that has been received in error. The sender
does not give any warranty or accept liability as the content, accuracy or
completeness of sent messages and accepts no responsibility for changes
made after they were sent or for other risks which arise as a result of
e-mail transmission, viruses, etc.

-------------------------------------------------------

3

Thanks for the fast reply!
I forgot to mention that I would like to have the restricted access (certain AOI and certain time interval) for WMS requests. Does the geofence plugin cover this?

Cheers,
Sabine

···

On Fri, Feb 12, 2016 at 11:57 AM, Sabine Ohlendorf sabine.ohlendorf@anonymised.com wrote:

Dear list,

I looked through the archive but didn’t find suitable information.
I have a GeoServer 2.7.1.1 running and would like to extend security settings. I read about the “Layer Security” in the GeoServer User Manual which is already a very good feature. But I am wondering if it is also possible to restrict access

  • to certain AOI for example via a defined polygon
  • to certain time interval (as I have layers with time parameter)

I would suggest to try the GeoFence plugin, it can setup both types of filter. The second it won’t be an explicit dimension filter, but
you can setup a CQL filter that will have the same effect on most layer (probably not on stand alone NetCDF layers,
but if it’s a vector layer, or an image mosaic, it should work.

Cheers
Andrea

–

==
GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.

4

On Fri, Feb 12, 2016 at 1:34 PM, Sabine Ohlendorf <sabine.ohlendorf@anonymised.com..>
wrote:

Thanks for the fast reply!
I forgot to mention that I would like to have the restricted access
(certain AOI and certain time interval) for WMS requests. Does the geofence
plugin cover this?

It does. As said, you should try it out, I'm not aware of previous cases
trying to apply
the same type of security (on polygon, yes, but not on a dimension), but
yes, it should
be possible, as least in theory.

Cheers
Andrea

--

GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

*AVVERTENZE AI SENSI DEL D.Lgs. 196/2003*

Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il
loro utilizzo è consentito esclusivamente al destinatario del messaggio,
per le finalità indicate nel messaggio stesso. Qualora riceviate questo
messaggio senza esserne il destinatario, Vi preghiamo cortesemente di
darcene notizia via e-mail e di procedere alla distruzione del messaggio
stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso,
divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od
utilizzarlo per finalità diverse, costituisce comportamento contrario ai
principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for
the attention and use of the named addressee(s) and may be confidential or
proprietary in nature or covered by the provisions of privacy act
(Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection
Code).Any use not in accord with its purpose, any disclosure, reproduction,
copying, distribution, or either dissemination, either whole or partial, is
strictly forbidden except previous formal approval of the named
addressee(s). If you are not the intended recipient, please contact
immediately the sender by telephone, fax or e-mail and delete the
information in this message that has been received in error. The sender
does not give any warranty or accept liability as the content, accuracy or
completeness of sent messages and accepts no responsibility for changes
made after they were sent or for other risks which arise as a result of
e-mail transmission, viruses, etc.

-------------------------------------------------------