GSIP 241 - GeoWebCache security-aware tiling

Hi,
I create a GSIP to handle the mix of tile caching with advanced security subsystems like GeoFence and ACL (or the many custom ones that are installation specific).

The work is really mostly a bug fix, currently GWC would just cache tiles ignoring security restrictions, and other users would see the tiles cached by the first user creating one.

Still, it’s complex enough that I wanted to pin down a design, and also describe the difficulties in eager tile removal when security rules change (hence the suggestion to just use disk quota, in this scenario).

Cheers
Andrea

+1

+1 from me as well.

+1

+1

Cheers,
Torben

On Fri, Jun 5, 2026 at 8:21 AM Andrea Aime <noreply@discourse.osgeo.org> wrote:

Someone replied to a topic you are Watching.

Hi,
I create a GSIP to handle the mix of tile caching with advanced security subsystems like GeoFence and ACL (or the many custom ones that are installation specific).

GitHub

GSIP 241

Official GeoServer repository. Contribute to geoserver/geoserver development by creating an account on GitHub.

The work is really mostly a bug fix, currently GWC would just cache tiles ignoring security restrictions, and other users would see the tiles cached by the first user creating one.

Still, it’s complex enough that I wanted to pin down a design, and also describe the difficulties in eager tile removal when security rules change (hence the suggestion to just use disk quota, in this scenario).

Cheers
Andrea


Visit Topic or reply to this email to respond.

You are receiving this because you enabled mailing list mode.

To unsubscribe from these emails, click here.

+1

+1

+1

Ian

+1

-Jukka Rahkonen-