Geographic Information Systems Stack Exchange is a question and answer site for cartographers, geographers and GIS professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've created a role in GeoServer called WFS_ACCESS. I've assigned it to a user called wfs_viewser and have the following rules setup:

enter image description here

Though when i hit my wfs service and login with wfs_viewer credentials i get an access denied error. As soon as i grant wfs_viewer "ROLE_ADMINISTRATOR" it works fine. What is wrong with my rules?

Build Information Version 2.1.0 Subversion Revision 15809 Build Date 11-May-2011 20:09 GeoTools Version 2.7.1 (rev -1)

share|improve this question
up vote 2 down vote accepted

The first two rules don’t provide any restrictions on access by default. However, they are overridden by your third rule which specifies that the WFS_ACCESS role only has read access to data in the catalog.* path.

Can you post all the roles you've set?

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.