[Geoserver-users] Security geoserver

Hi list,

I need create three users and assign roles:

user 1: “admin global” (already exists in geoserver) ← ROLE_ADMINISTRATOR
user 2: “advanced” , with permissions of: all permissions except, modify roles and users <— ROLE_ADVANCED
user 3: “basic” , with permissions of: edit layer style, upload data (through the plugin LayerUploadPanel of geoexplorer), save maps and export maps. <—ROLE_BASIC

I am create ROLE_BASIC (without parent) ; ROLE_AVANCED with parent ROLE_BASIC

I am assigned in the rest.properties :

/;GET=ADMINISTRATOR
/
;PUT,POST,DELETE=ADMINISTRATOR,ROLE_AUTHENTICATED,ADVANCED,BASIC,GROUP_ADMIN

In the security service:

"Grant access to any role for all service "

But, the basic and advanced user can not modify layer styles, also can not upload data:

here the error trying to modify style:

There was an error saving the style back to the server.

PUT http://myserver/geoserver/rest/styles/polygono_xx.xml 403 (forbidden) GeoExplorer.js:424

PUT http://myserver/geoserver/rest/layers/polygono_xx.json 403 (forbidden) (GeoExplorer.js:42)

Can you help me please?

Thanks in advanced

Pablo