[Geoserver-users] Restrict admin user to specific workspace

GeoServer GeoServer User
1

I have a default Geoserver v2.2.1 setup, which I use for demo purposes.

I’m now working on a project that requires a second user to work on my Geoserver.

I want this second user admin rights to a specific workspace only, so he can add, remove and alter layers and stores.

I’ve created a new Group Servers using the ‘Users, Groups, and Roles’ page.

In this service I’ve added a new user.

In the ‘Data Security’ page I’ve added a rule: .*.a

Now I don’t know how to continue. I’ve looked at the Group options and the Role options but I’m not sure how to add the data rule to the new user.

Can anybody assist?

Thanks,

Paul

2

Thanks to Teuta who send me some pointers off list I came to this solution:

  1. Create a new group in the default service, add a new role to this group

  2. Create a data security rule, giving admin access to 1 workspace only and select the role created in step 1

  3. Create a new user, add him to the new group created in step 1

  4. Done!

Now I have created two users in the new group who only have access to their own workspace.

In the layer preview all layers were still visible, I changed that but the layer groups stay visible.

How can I stop advertising layer groups?

Thanks,

···

Paul

Paul Meems
Release manager, configuration manager
and forum moderator of MapWindow GIS.
www.mapwindow.org

Owner of MapWindow.nl - Support for
Dutch speaking users.
www.mapwindow.nl

2013/8/12 Paul Meems <bontepaarden@…84…>

I have a default Geoserver v2.2.1 setup, which I use for demo purposes.

I’m now working on a project that requires a second user to work on my Geoserver.

I want this second user admin rights to a specific workspace only, so he can add, remove and alter layers and stores.

I’ve created a new Group Servers using the ‘Users, Groups, and Roles’ page.

In this service I’ve added a new user.

In the ‘Data Security’ page I’ve added a rule: .*.a

Now I don’t know how to continue. I’ve looked at the Group options and the Role options but I’m not sure how to add the data rule to the new user.

Can anybody assist?

Thanks,

Paul

3

On Tue, Aug 13, 2013 at 9:53 AM, Paul Meems <bontepaarden@anonymised.com> wrote:

Thanks to Teuta who send me some pointers off list I came to this solution:

1. Create a new group in the default service, add a new role to this group
2. Create a data security rule, giving admin access to 1 workspace only
and select the role created in step 1
3. Create a new user, add him to the new group created in step 1
4. Done!

Now I have created two users in the new group who only have access to
their own workspace.
In the layer preview all layers were still visible, I changed that but the
layer groups stay visible.
How can I stop advertising layer groups?

There was a thread recently on this very topic, long story short, you
cannot, some development
would be needed to hide them

Cheers
Andrea

--

Our support, Your Success! Visit http://opensdi.geo-solutions.it for more
information.

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

-------------------------------------------------------