Introducing the Security Section in GeoServer and Defining Users, Groups, and Roles

[@geospatialtechno]

You can ask me if you have any questions

[@irvingantoniovallejo3768]

Hello! How can I disable the Security module for a non administrator user, I need all the modules except the security module? Greetings :)

[@geospatialtechno]

​@@irvingantoniovallejo3768 Disabling security modules can be harmful to system security, so it is advisable to avoid doing so unless there is a specific reason and the potential risks have been thoroughly assessed.

[@abdoulayeleye5399]

Very instructive work.

[@geospatialtechno]

Glad you liked it

[@abolfazl5971]

Keep up the good work :)

[@geospatialtechno]

thanks a lot

[@ThemDev-pr9ui]

That was a nice tutorial!!

[@geospatialtechno]

Glad you think so!

[@TubePaladin]

I watched this video and tutorial; it was very helpful. Thank you so much.However, I have a question: Is this method effective when we use the geofence plugin, or does using the geofence plugin render this method ineffective?

[@geospatialtechno]

The Geofence plugin improves GeoServer's security by offering granular control over access permissions, complementing existing role-based access control. It enhances the system by enabling authorization rules based on user identity, role, and data attributes. This allows for refined access control, such as restricting data layer access by user roles, facilitating nuanced security configurations beyond standard roles.

[@TubePaladin]

@@geospatialtechno Thank you so much. I understood that if we have already installed the Geofence plugin, we are not able to see any layers in the layer preview. As you showed in your video, you were searching for ‘project’ workspace layers among the layer preview via the search field. When I created an admin role and set data for admin access in the ‘data’ part, I was not able to see the admin features as shown in your video. The admin features only appeared after I set role_admin in the Geofence admin rule and defined role_admin as admin. After that, I was able to see the admin features as shown in your tutorial. If I understood correctly, to define access levels to data, we should follow the methods you described in the tutorial. If we want to give access for viewing or not viewing, and particularly for admin features (workspace, layer, etc.), defining the admin role in the ‘data’ folder section is not enough when using Geofence. I really appreciate you taking the time to create this tutorial. It addressed a problem and question I had for a long time about handling data access when using the Geofence plugin. The combination of Geofence and your data access method in GeoServer was very interesting and applicable.

[@geospatialtechno]

@@TubePaladin My pleasure, I'm glad you like it🤩

[@venkataramanarayana4557]

is there any way we can secure WMTS service, Which is not available in the service dropdown list.

[@geospatialtechno]

I haven't encountered this situation before, so I asked the GeoServer developers for assistance. Here's their suggestion: Enable the "Data Security" option found on the "Caching defaults" page and follow the link below: "docs.geoserver.org/main/en/user/geowebcache/config.html#geoserver-data-security"