[Geoserver-users] WFS capability service change

Hi,

I was published one WFS service using geoserver (ver. 2.8.0) and I want to use WFS service in QGIS for query purpose. But I don’t want user can download the data as shapefile.

Please help me where I have to change wfs getcapability service related to workspace.

Thanks,
Rohit Garg
09111844757

On Tue, Dec 15, 2015 at 6:19 AM, RohitGarg DevLead <rohit.garg@anonymised.com>
wrote:

Hi,

I was published one WFS service using geoserver (ver. 2.8.0) and I want to
use WFS service in QGIS for query purpose. But I don't want user can
download the data as shapefile.

Please help me where I have to change wfs getcapability service related to
workspace.

Hi,
there is no way to disable output formats without a bit of programming,
they have to
be removed from the application context file, and then possibly find out
what else is breaking
because they are no more around (e.g., some WPS stuff might stop working,
there could
be other stuff too).

If you really want to go there, I can give you a small hint, you should
comment out this line:
https://github.com/geoserver/geoserver/blob/master/src/wfs/src/main/java/applicationContext.xml#L607
in the gs-wfs-<version>.jar found in the webapps/geoserver/WEB-INF/lib
directory.

Mind, if you really don't want people to dump out your data, the above
change is pointless,
they can just use ogr2ogr to go to the GML output and turn it into whatever
other format
they desire, the only way to actually disallow a dump is to disable WFS.

Cheers
Andrea

--

GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

*Geosolutions' Winter Holidays from 24/12 to 6/1*

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

*AVVERTENZE AI SENSI DEL D.Lgs. 196/2003*

Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il
loro utilizzo è consentito esclusivamente al destinatario del messaggio,
per le finalità indicate nel messaggio stesso. Qualora riceviate questo
messaggio senza esserne il destinatario, Vi preghiamo cortesemente di
darcene notizia via e-mail e di procedere alla distruzione del messaggio
stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso,
divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od
utilizzarlo per finalità diverse, costituisce comportamento contrario ai
principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for
the attention and use of the named addressee(s) and may be confidential or
proprietary in nature or covered by the provisions of privacy act
(Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection
Code).Any use not in accord with its purpose, any disclosure, reproduction,
copying, distribution, or either dissemination, either whole or partial, is
strictly forbidden except previous formal approval of the named
addressee(s). If you are not the intended recipient, please contact
immediately the sender by telephone, fax or e-mail and delete the
information in this message that has been received in error. The sender
does not give any warranty or accept liability as the content, accuracy or
completeness of sent messages and accepts no responsibility for changes
made after they were sent or for other risks which arise as a result of
e-mail transmission, viruses, etc.

-------------------------------------------------------

Thanks a lots Andrea.

···

On Tue, Dec 15, 2015 at 6:19 AM, RohitGarg DevLead <rohit.garg@anonymised.com> wrote:

Hi,

I was published one WFS service using geoserver (ver. 2.8.0) and I want to use WFS service in QGIS for query purpose. But I don’t want user can download the data as shapefile.

Please help me where I have to change wfs getcapability service related to workspace.

Hi,
there is no way to disable output formats without a bit of programming, they have to
be removed from the application context file, and then possibly find out what else is breaking
because they are no more around (e.g., some WPS stuff might stop working, there could
be other stuff too).

If you really want to go there, I can give you a small hint, you should comment out this line:
https://github.com/geoserver/geoserver/blob/master/src/wfs/src/main/java/applicationContext.xml#L607

in the gs-wfs-.jar found in the webapps/geoserver/WEB-INF/lib directory.

Mind, if you really don’t want people to dump out your data, the above change is pointless,
they can just use ogr2ogr to go to the GML output and turn it into whatever other format
they desire, the only way to actually disallow a dump is to disable WFS.

Cheers
Andrea

==
GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Geosolutions’ Winter Holidays from 24/12 to 6/1

Ing. Andrea Aime

@geowolf
Technical Lead

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.


The alternative way is proxy pattern. Put your geoserver where there is no external access to it, and another server managing access to it as a proxy. That way you can edit everything coming into the proxy before passing it to the real geoserver. I think that Geofence works this way. Might be another way to do it. The proxy can do a lot of interesting tricks for you. Add calculated fields, "join" with unconventional datastores (eg we do it with an image repository) etc.

Notice: This email and any attachments are confidential.
If received in error please destroy and immediately notify us.
Do not copy or disclose the contents.

On Tue, Dec 15, 2015 at 9:46 PM, Phil Scadden <p.scadden@anonymised.com> wrote:

The alternative way is proxy pattern. Put your geoserver where there is
no external access to it, and another server managing access to it as a
proxy. That way you can edit everything coming into the proxy before
passing it to the real geoserver. I think that Geofence works this way.

Oh no it does not, we argued a few years ago that proxy is not the way
to go if you want secure a feature rich/ever evolving server:
http://demo.geo-solutions.it/share/securing_geoserver.pdf

GeoFence integrates inside GeoServer, not in front of it

Cheers
Andrea

--

GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

*Geosolutions' Winter Holidays from 24/12 to 6/1*

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

*AVVERTENZE AI SENSI DEL D.Lgs. 196/2003*

Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il
loro utilizzo è consentito esclusivamente al destinatario del messaggio,
per le finalità indicate nel messaggio stesso. Qualora riceviate questo
messaggio senza esserne il destinatario, Vi preghiamo cortesemente di
darcene notizia via e-mail e di procedere alla distruzione del messaggio
stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso,
divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od
utilizzarlo per finalità diverse, costituisce comportamento contrario ai
principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for
the attention and use of the named addressee(s) and may be confidential or
proprietary in nature or covered by the provisions of privacy act
(Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection
Code).Any use not in accord with its purpose, any disclosure, reproduction,
copying, distribution, or either dissemination, either whole or partial, is
strictly forbidden except previous formal approval of the named
addressee(s). If you are not the intended recipient, please contact
immediately the sender by telephone, fax or e-mail and delete the
information in this message that has been received in error. The sender
does not give any warranty or accept liability as the content, accuracy or
completeness of sent messages and accepts no responsibility for changes
made after they were sent or for other risks which arise as a result of
e-mail transmission, viruses, etc.

-------------------------------------------------------