Are WFS transactions enabled by default? This was a surprise. Does this cause the default deployment to allow write access to database backends? Or is there another level of authentication required (users.properties, perhaps?). I know very little about WFS-T.
Kind regards,
--
Ben Caradoc-Davies <Ben.Caradoc-Davies@anonymised.com>
Software Engineer, CSIRO Exploration and Mining
Australian Resources Research Centre
26 Dick Perry Ave, Kensington WA 6151, Australia
I don't know whether WFS-T is up by default, but I should think that the level of access from the default deployment to a db backend is going to be controlled primarily by the privileges associated with the db role you configure for that datastore. I.e., no INSERT/UPDATE/DELETE privilege to Table X, then no write access, no matter what GeoServer does.
---
A. Soroka
Digital Research and Scholarship R & D
the University of Virginia Library
On Jul 7, 2009, at 4:06 AM, Ben Caradoc-Davies wrote:
Are WFS transactions enabled by default? This was a surprise. Does this
cause the default deployment to allow write access to database backends?
Or is there another level of authentication required (users.properties,
perhaps?). I know very little about WFS-T.Kind regards,
--
Ben Caradoc-Davies <Ben.Caradoc-Davies@anonymised.com>
Software Engineer, CSIRO Exploration and Mining
Australian Resources Research Centre
26 Dick Perry Ave, Kensington WA 6151, Australia------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge
This is your chance to win up to $100,000 in prizes! For a limited time,
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize
details at: http://p.sf.net/sfu/blackberry
_______________________________________________
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users
Ben Caradoc-Davies ha scritto:
Are WFS transactions enabled by default? This was a surprise. Does this cause the default deployment to allow write access to database backends? Or is there another level of authentication required (users.properties, perhaps?). I know very little about WFS-T.
They are enabled by default, yes.
The default data dir is a set of demos, including WFS-T ones, so WFS-T
is enabled without restrictions.
A GeoServer locked down for production would not be much use demo wise.
A. Soroka is right thought, if you are using database backends GeoServer
won't be able to write on tables that the user provided in the connection pool is not allowed to use, same as the shapefiles, where
GeoServer wont' be able to change the data if the user running the
web container is not able to write on the folders containing the
shapefile themselves (downside, in that case it won't be able
to create spatial indexes either).
In any case, if you don't want WFS-T, you can either use the
built in security or just disable it fully going to the WFS
configuration panels.
Cheers
Andrea
--
Andrea Aime
OpenGeo - http://opengeo.org
Expert service straight from the developers.