Geographic Information Systems Stack Exchange is a question and answer site for cartographers, geographers and GIS professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm currently researching on some access control models for SaaS-based GIS, and in the future would like to implement one. The common use cases would be like: some of the services, resources, layers, features, areas on map, etc. will be accessible only by authorized users.

I have searched for a while and find the OGC GeoXACML implementation specification meet our needs quite well and looks promising. And also there's quite a few paper discussing about Geoxacml that I can refer to. But then I find another article which propose to use oracle VPD (we are using oracle spatial), and it points out that the GeoXACML has some inefficient consequences. There is another tool that might solve the problem is the GeoShield (, but it seems to be in the early work and don't have to much documentation. So which option would you suggest? Is there other options available? If geoxacml is the right way to go, how long do you estimate it will take to implement it? Any response would be appreciated.

share|improve this question
What were your findings and how did you proceed? I am currently embarking on the same area of research and have found this question. – 8bitjunkie Sep 10 '15 at 9:20

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.