GSIP 241 - GeoWebCache security-aware tiling

GeoServer GeoServer Developer
1

Hi,
I create a GSIP to handle the mix of tile caching with advanced security subsystems like GeoFence and ACL (or the many custom ones that are installation specific).

The work is really mostly a bug fix, currently GWC would just cache tiles ignoring security restrictions, and other users would see the tiles cached by the first user creating one.

Still, it’s complex enough that I wanted to pin down a design, and also describe the difficulties in eager tile removal when security rules change (hence the suggestion to just use disk quota, in this scenario).

Cheers
Andrea

2

+1

3

+1 from me as well.

4

+1

5

+1

Cheers,
Torben

On Fri, Jun 5, 2026 at 8:21 AM Andrea Aime <noreply@discourse.osgeo.org> wrote:

Someone replied to a topic you are Watching.

aaime-geosolutions
June 5

Hi,
I create a GSIP to handle the mix of tile caching with advanced security subsystems like GeoFence and ACL (or the many custom ones that are installation specific).

GitHub

GSIP 241

Official GeoServer repository. Contribute to geoserver/geoserver development by creating an account on GitHub.

The work is really mostly a bug fix, currently GWC would just cache tiles ignoring security restrictions, and other users would see the tiles cached by the first user creating one.

Still, it’s complex enough that I wanted to pin down a design, and also describe the difficulties in eager tile removal when security rules change (hence the suggestion to just use disk quota, in this scenario).

Cheers
Andrea

Visit Topic or reply to this email to respond.

You are receiving this because you enabled mailing list mode.

To unsubscribe from these emails, click here.

6

+1

7

+1

8

+1

Ian

9

+1

-Jukka Rahkonen-

10

Thanks Andrea:

This proposal has passed, and I have updated the wiki page to reflect the votes in this thread.

I am +0 as I did not respond in time, that said the proposal was very detailed so I do not have any useful questions.