Geographic Information Systems Stack Exchange is a question and answer site for cartographers, geographers and GIS professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to implement row level security with GeoServer. I know out of the box it supports service, layer and REST security and not row level. However I'm sure there must be a work around. Has anyone successfully implemented it?

share|improve this question
up vote 3 down vote accepted

Not that I know of... i imagine this would be something that does not really classify as "workaround", but full on feature development :)

It is possible with geoserver to plug in your own security manager (ResourceAccessManager) so that could be a good hook into code for implementing this. It was actually just recently redesigned to allow for finer grained security constraints so I imagine it would not be too hard to implement something custom with it.

There is also work going on (via a summer of code project) to improve the configurability of the security subsystem. I am not sure if it involves row level concerns... I suggest asking on the geoserver-devel list for an update.

share|improve this answer
thanks for your answer. (+1) Could you please elaborate on how "it is possible ... to plug in your own security manager". Do you mean in GeoServer source code? I'm hoping i don't have to change the source code. – CaptDragon Aug 2 '11 at 14:54

Maybe the GeoShield project can help you out. It's a stand-alone proxy to secure WMS, WFS, WPS and SOS services. The developers also announced that they are working on a GeoServer plugin. Although there's few documentation of the project and I haven't tried it yet, it seems that row level security is possible by using CQL statements like in the following example:

Group: FOO
Server: BAR
Layer: BAZ
Permission: COLOR='RED' AND BBOX(the_geom,707724,82464,732146,113847))
Description: users that belong to the group FOO can view the layer BAZ on server BAR
    but only the features inside the given BBOX that have an attribute color equals 
    to red.
share|improve this answer
Interesting, I'll look into it and see if it satisfies my needs. – CaptDragon Jan 3 '12 at 15:16

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.