Credentials are not applied when root level of a WMS is selected
Case : under GaÃ¯a, the user can add a WMS service and then select either :
- the layers he would like to get
- the root of the service
In this last case, the layers he gets are not restricted to the one he can (has the right) to see but ALL the layers available on the remote WMS server.
It seems to be a major issue... and should be fixed as soon as possible (we have two WMS in production).
PS : same problem might occur with WFS ? we did not check
#1 Updated by Michaelis Renaud over 10 years ago
- Assignee set to Michaelis Renaud
As we keep the hierarchy of the layers, the root layer should be visible in order to be able to display the child layers.
To bypass this issue, just set the minimum scale and the maximum scale to 0. Thus the layer hierarchy will still exist but the root layer will be never displayed.
This problem should not appear with WFS.
#3 Updated by Magoni Bruno over 10 years ago
- Assignee changed from Michaelis Renaud to Magoni Bruno
Xavier, as the workaround is fixed, do you agree to close this bug or should we move this demand to an evolution (for example setting this kind of configuration through the Web interface without having to change the scale's parameter) ?
#4 Updated by Mérour Xavier over 10 years ago
OK, min and max scale have been defined.
I suggest to modify the configuration panel in order to prevent from this problem in a next release : for example, the root element should not be listed like the others but should clearly be put apart (different place ? in bold ?) or with an informative text to explain this configuration.
Better : set by default min and max scale to 0 for the root layer (like a global parameter...)!
#8 Updated by Mérour Xavier over 10 years ago
After some discussion... we still think that the "scale" workaround is a solution but the bug remain : the user should be able to load all layers of a service by choosing the root. BUT the user should just get the layers he has the right to see. Isn'it ?
The suggested "evolution" remain interesting... and might me done in a next release.
Thanks for your answer...
#9 Updated by Magoni Bruno over 10 years ago
In WMS, a parent layer (ROOT or NOT) is able to display any map (one of her own or all the children layers); it depends on the configuration of the service.
So, it would be interesting to add through the PROXY the possibility to display the structure and/or the content of any parent layer.
This configuration should be made in the main config of the PROXY (default config) but also for each policy (specific config).
If the structure of a parent layer is visible but not his content (maps), the PROXY will use the workaround solution (min/max scale = 0).