[Geoserver-users] GWC Seeding & Data Security

GeoServer GeoServer User
1

See a discussion in http://osgeo-org.1560.x6.nabble.com/GS-2-3-0-seeding-form-anonymous-error-td5049892.html where Andrea says “Generally speaking, security and caching do not mix well” and notes GWC seeding threads operate without any authentication, so they fail.

Has anyone had any success with setting Data Security on a layer to require an authenticated (or other) role, and still being able to pre-seed the cache through GWC REST interface?

I have some semi-dynamic layers that I need to truncate and re-seed every 6 hours or so, but access to the data still needs to be authenticated.

Any hope for being able to do this? Any strategy that others have found works?

Thanks,

Mike Grogan

2

On Mon, Aug 19, 2013 at 5:26 PM, Mike Grogan <d.michael.grogan@anonymised.com>wrote:

See a discussion in
http://osgeo-org.1560.x6.nabble.com/GS-2-3-0-seeding-form-anonymous-error-td5049892.html where
Andrea says "Generally speaking, security and caching do not mix well" and
notes GWC seeding threads operate without any authentication, so they fail.

Has anyone had any success with setting Data Security on a layer to
require an authenticated (or other) role, and still being able to pre-seed
the cache through GWC REST interface?

I have some semi-dynamic layers that I need to truncate and re-seed every
6 hours or so, but access to the data still needs to be authenticated.

Any hope for being able to do this? Any strategy that others have found
works?

None, once tiles are seeded, they're available to everybody as far as I
know.

We'd need some new code in the GWC/GS integration (and maybe changes to the
GWC code itself)
to have the integrated GWC use security (GWC by itself has no notion of
security to start with,
but it has a concept of tile filters, maybe those can be abused to apply
some sort of security)

Cheers
Andrea

--

Our support, Your Success! Visit http://opensdi.geo-solutions.it for more
information.

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

-------------------------------------------------------