[Geoserver-users] Security geoserver

Javier_Avalos · October 14, 2014, 5:06pm

Geoexplorer only allows the administrator role to perform these tasks. I had the same experience.

Greetings.

–
Servicios Computacionales y Asesoría en Sistemas de Información Geográfica
Francisco Javier Avalos Zapata
Ciudad Victoria, Tamaulipas
javalos@anonymised.com

Pablo_J_Zader · October 15, 2014, 3:29pm

Thanks Javier, but do not understand some things:

1 - in the GeoExplorer code (eg LayerUploadPanel.js) I can define an array of roles:

roles:[“ROLE_ADMINISTRATOR”,“BASIC”,“ADVANCED”, …]

and according to my definition of roles and user, GeoExplorer allows me to geoserver I login but does not allow me to add a layer or edit the style of a vector.

2 - the user roles I define in the other mail are correct according to what I want to accomplish? for example, that way I can prove that my security settings work?

Thanks!!
Pablo

···

El 14 de octubre de 2014, 14:06, Javier Avalos <javalos@anonymised.com> escribió:

Geoexplorer only allows the administrator role to perform these tasks. I had the same experience.

Greetings.

–
Servicios Computacionales y Asesoría en Sistemas de Información Geográfica
Francisco Javier Avalos Zapata
Ciudad Victoria, Tamaulipas
javalos@anonymised.com

Javier_Avalos · October 16, 2014, 4:29am

Check the message returned with the developer tools of chrome por firefox.
Which versión of geoserver you uses?

···

El 14 de octubre de 2014, 14:06, Javier Avalos <javalos@anonymised.com> escribió:

Geoexplorer only allows the administrator role to perform these tasks. I had the same experience.

Greetings.

–
Servicios Computacionales y Asesoría en Sistemas de Información Geográfica
Francisco Javier Avalos Zapata
Ciudad Victoria, Tamaulipas
javalos@anonymised.com

Javier_Avalos · October 16, 2014, 4:44am

---------- Mensaje reenviado ----------

···

El 14 de octubre de 2014, 14:06, Javier Avalos <javalos@anonymised.com> escribió:

Geoexplorer only allows the administrator role to perform these tasks. I had the same experience.

Greetings.

–
Servicios Computacionales y Asesoría en Sistemas de Información Geográfica
Francisco Javier Avalos Zapata
Ciudad Victoria, Tamaulipas
javalos@anonymised.com6683…

Pablo_J_Zader · October 16, 2014, 12:23pm

Thanks Javier,

But unfortunately the links you send me no answer my question:

The first link: “how to make an X user can not edit the layers” , but my problem is that a user who is NOT administrator can not edit the layers. I need the user to edit the layer styles…

The error (chrome tool developer):

There was an error saving the style back to the server.

PUT http://myserver/geoserver/rest/styles/polygono_xx.xml 403 (forbidden) GeoExplorer.js:424

PUT http://myserver/geoserver/rest/layers/polygono_xx.json 403 (forbidden) (GeoExplorer.js:42)

The second link: “how to upload to geoserver layers server from GeoExplorer” , solved it in the same way, thanks, but again if the user is not an administrator can not use this feature for the same reason as before.

I think this is a problem in the geoserver security. Someone geoserver could answer this?

Thanks in advanced

Pablo

···

2014-10-16 1:44 GMT-03:00 Javier Avalos <javalos@anonymised.com>:

---------- Mensaje reenviado ----------
De: “Javier Avalos” <javalos@anonymised.com>
Fecha: 15/10/2014 23:41
Asunto: Re: Security geoserver
Para: “pablo zader” <pzader@anonymised.com>
Cc:

Check this url: http://gis.stackexchange.com/questions/75804/geoserver-limit-sld-editing-functionality-to-certain-users-in-geoexplorer
Only users with administrative privileges can edit styles.

Upload layer is possible a missing java library in geoserver. http://www.asesoriaensig.com.mx/blog/?p=1160

El 15/10/2014 10:30, “pablo zader” <pzader@anonymised.com> escribió:

Thanks Javier, but do not understand some things:

1 - in the GeoExplorer code (eg LayerUploadPanel.js) I can define an array of roles:

roles:[“ROLE_ADMINISTRATOR”,“BASIC”,“ADVANCED”, …]

and according to my definition of roles and user, GeoExplorer allows me to geoserver I login but does not allow me to add a layer or edit the style of a vector.

2 - the user roles I define in the other mail are correct according to what I want to accomplish? for example, that way I can prove that my security settings work?

Thanks!!
Pablo

El 14 de octubre de 2014, 14:06, Javier Avalos <javalos@anonymised.com> escribió:

Geoexplorer only allows the administrator role to perform these tasks. I had the same experience.

Greetings.

–
Servicios Computacionales y Asesoría en Sistemas de Información Geográfica
Francisco Javier Avalos Zapata
Ciudad Victoria, Tamaulipas
javalos@anonymised.com

Javier_Avalos · October 16, 2014, 3:43pm

Only administrativa users can editor styles in the “global workspace” . Users not administrativas can but within the workspaces only. But geoexplorer not edit styles en workspaces. =(

···

2014-10-16 1:44 GMT-03:00 Javier Avalos <javalos@anonymised.com>:

---------- Mensaje reenviado ----------
De: “Javier Avalos” <javalos@anonymised.com>
Fecha: 15/10/2014 23:41
Asunto: Re: Security geoserver
Para: “pablo zader” <pzader@anonymised.com>
Cc:

Check this url: http://gis.stackexchange.com/questions/75804/geoserver-limit-sld-editing-functionality-to-certain-users-in-geoexplorer
Only users with administrative privileges can edit styles.

Upload layer is possible a missing java library in geoserver. http://www.asesoriaensig.com.mx/blog/?p=1160

El 15/10/2014 10:30, “pablo zader” <pzader@anonymised.com> escribió:

Thanks Javier, but do not understand some things:

1 - in the GeoExplorer code (eg LayerUploadPanel.js) I can define an array of roles:

roles:[“ROLE_ADMINISTRATOR”,“BASIC”,“ADVANCED”, …]

and according to my definition of roles and user, GeoExplorer allows me to geoserver I login but does not allow me to add a layer or edit the style of a vector.

2 - the user roles I define in the other mail are correct according to what I want to accomplish? for example, that way I can prove that my security settings work?

Thanks!!
Pablo

El 14 de octubre de 2014, 14:06, Javier Avalos <javalos@anonymised.com> escribió:

Geoexplorer only allows the administrator role to perform these tasks. I had the same experience.

Greetings.

–
Servicios Computacionales y Asesoría en Sistemas de Información Geográfica
Francisco Javier Avalos Zapata
Ciudad Victoria, Tamaulipas
javalos@anonymised.com

Pablo_J_Zader · October 17, 2014, 2:20pm

Thanks for the reply.
Excuse my ignorance, but what you mean with the “global workspace”?

On the other hand , GeoExplorer allows me to edit styles (user admin of course)!!!

Pablo

···

2014-10-16 12:43 GMT-03:00 Javier Avalos <javalos@anonymised.com83…>:

Only administrativa users can editor styles in the “global workspace” . Users not administrativas can but within the workspaces only. But geoexplorer not edit styles en workspaces. =(

El 16/10/2014 07:24, “pablo zader” <pzader@anonymised.com> escribió:

Thanks Javier,

But unfortunately the links you send me no answer my question:

The first link: “how to make an X user can not edit the layers” , but my problem is that a user who is NOT administrator can not edit the layers. I need the user to edit the layer styles…

The error (chrome tool developer):

There was an error saving the style back to the server.

PUT http://myserver/geoserver/rest/styles/polygono_xx.xml 403 (forbidden) GeoExplorer.js:424

PUT http://myserver/geoserver/rest/layers/polygono_xx.json 403 (forbidden) (GeoExplorer.js:42)

The second link: “how to upload to geoserver layers server from GeoExplorer” , solved it in the same way, thanks, but again if the user is not an administrator can not use this feature for the same reason as before.

I think this is a problem in the geoserver security. Someone geoserver could answer this?

Thanks in advanced

Pablo

2014-10-16 1:44 GMT-03:00 Javier Avalos <javalos@anonymised.com>:

---------- Mensaje reenviado ----------
De: “Javier Avalos” <javalos@anonymised.com>
Fecha: 15/10/2014 23:41
Asunto: Re: Security geoserver
Para: “pablo zader” <pzader@anonymised.com>
Cc:

Check this url: http://gis.stackexchange.com/questions/75804/geoserver-limit-sld-editing-functionality-to-certain-users-in-geoexplorer
Only users with administrative privileges can edit styles.

Upload layer is possible a missing java library in geoserver. http://www.asesoriaensig.com.mx/blog/?p=1160

El 15/10/2014 10:30, “pablo zader” <pzader@anonymised.com> escribió:

Thanks Javier, but do not understand some things:

1 - in the GeoExplorer code (eg LayerUploadPanel.js) I can define an array of roles:

roles:[“ROLE_ADMINISTRATOR”,“BASIC”,“ADVANCED”, …]

and according to my definition of roles and user, GeoExplorer allows me to geoserver I login but does not allow me to add a layer or edit the style of a vector.

2 - the user roles I define in the other mail are correct according to what I want to accomplish? for example, that way I can prove that my security settings work?

Thanks!!
Pablo

El 14 de octubre de 2014, 14:06, Javier Avalos <javalos@anonymised.com> escribió:

Geoexplorer only allows the administrator role to perform these tasks. I had the same experience.

Greetings.

–
Servicios Computacionales y Asesoría en Sistemas de Información Geográfica
Francisco Javier Avalos Zapata
Ciudad Victoria, Tamaulipas
javalos@anonymised.com

Javier_Avalos · October 17, 2014, 4:07pm

I mean on the folder styles in the geoserver data directory. Users no administratives only can modify styles into workspaces folders.

Sorry by my english…

···

2014-10-17 9:20 GMT-05:00 pablo zader <pzader@anonymised.com>:

Thanks for the reply.
Excuse my ignorance, but what you mean with the “global workspace”?

On the other hand , GeoExplorer allows me to edit styles (user admin of course)!!!

Pablo

–
Servicios Computacionales y Asesoría en Sistemas de Información Geográfica
Francisco Javier Avalos Zapata
Ciudad Victoria, Tamaulipas
javalos@anonymised.com

2014-10-16 12:43 GMT-03:00 Javier Avalos <javalos@anonymised.com3…>:

Only administrativa users can editor styles in the “global workspace” . Users not administrativas can but within the workspaces only. But geoexplorer not edit styles en workspaces. =(

El 16/10/2014 07:24, “pablo zader” <pzader@anonymised.com> escribió:

Thanks Javier,

But unfortunately the links you send me no answer my question:

The first link: “how to make an X user can not edit the layers” , but my problem is that a user who is NOT administrator can not edit the layers. I need the user to edit the layer styles…

The error (chrome tool developer):

There was an error saving the style back to the server.

PUT http://myserver/geoserver/rest/styles/polygono_xx.xml 403 (forbidden) GeoExplorer.js:424

PUT http://myserver/geoserver/rest/layers/polygono_xx.json 403 (forbidden) (GeoExplorer.js:42)

The second link: “how to upload to geoserver layers server from GeoExplorer” , solved it in the same way, thanks, but again if the user is not an administrator can not use this feature for the same reason as before.

I think this is a problem in the geoserver security. Someone geoserver could answer this?

Thanks in advanced

Pablo

2014-10-16 1:44 GMT-03:00 Javier Avalos <javalos@anonymised.com>:

---------- Mensaje reenviado ----------
De: “Javier Avalos” <javalos@anonymised.com>
Fecha: 15/10/2014 23:41
Asunto: Re: Security geoserver
Para: “pablo zader” <pzader@anonymised.com>
Cc:

Check this url: http://gis.stackexchange.com/questions/75804/geoserver-limit-sld-editing-functionality-to-certain-users-in-geoexplorer
Only users with administrative privileges can edit styles.

Upload layer is possible a missing java library in geoserver. http://www.asesoriaensig.com.mx/blog/?p=1160

El 15/10/2014 10:30, “pablo zader” <pzader@anonymised.com> escribió:

Thanks Javier, but do not understand some things:

1 - in the GeoExplorer code (eg LayerUploadPanel.js) I can define an array of roles:

roles:[“ROLE_ADMINISTRATOR”,“BASIC”,“ADVANCED”, …]

and according to my definition of roles and user, GeoExplorer allows me to geoserver I login but does not allow me to add a layer or edit the style of a vector.

2 - the user roles I define in the other mail are correct according to what I want to accomplish? for example, that way I can prove that my security settings work?

Thanks!!
Pablo

El 14 de octubre de 2014, 14:06, Javier Avalos <javalos@anonymised.com> escribió:

Geoexplorer only allows the administrator role to perform these tasks. I had the same experience.

Greetings.

–
Servicios Computacionales y Asesoría en Sistemas de Información Geográfica
Francisco Javier Avalos Zapata
Ciudad Victoria, Tamaulipas
javalos@anonymised.com