The processes and mechanisms by which computer-based equipment, information and services are protected from unintended or unauthorized access, change or destruction

learn more… | top users | synonyms

1
vote
1answer
28 views

Identifying user triggering ArcGIS Server invalid username or password error

Can anyone tell me if there is a way to identify the culprit of an "Invalid Username or Password" error in ArcGIS Server logs? For source, it just says 'Admin' for source, and nothing for User. Is ...
0
votes
1answer
50 views

Upgrading to ArcGIS 10.2 for Server and security vulnerability?

I have ArcGIS 10.1 Installed on my CentOS server and I have also installed "ArcGIS-101SP1-S-SSEC-Patch-lx" security patch. Do I need to upgrade ArcGIS for Server to 10.2? If I don't install the ...
0
votes
0answers
28 views

Implement security to qGIS Server (for windows)

I have few map services running on QGIS Server(v 2.2.X on Windows 7 32 bit) and anyone can connect or access those services (WMS & WFS). Is there any way to implement security in QGIS Server? So ...
1
vote
1answer
39 views

HTTPS and working with non-secure services - ESRI jsAPI

Situation: I am currently working with an app that is required to be delivered over HTTPS because of an organizational security requirement. I currently do not have access to this servers ...
4
votes
1answer
72 views

Data Security for Geoserver - Users errantly seeing Workspaces not assigned to them

I'm having trouble with Data Security in my Geoserver 2.5 application. Let me preface my situation. I am using Geoexplorer composer which is making GeoServer API calls through ows and wms. I have ...
3
votes
0answers
63 views

ArcGIS Server 10.1 Integrated Windows Authentication with Token based

In ArcGIS Server 10.1 on Windows 7 and IIS, if wanting to secure services within an Intranet with Active Directory is that Integrated Windows Authentication ...
1
vote
1answer
136 views

Secure credentials for scheduled python script targeting ArcSDE 10.1 on AWS

I have a python script that will be used as a scheduled task. Our dba team is wanting the credentials to be as secure as possible. I would say that using the os security system as far as locking ...
1
vote
4answers
116 views

What GIS applications and services have been affected by the Heartbleed vulnerability?

Heartbleed is the name given to a recent, very severe security vulnerability in the OpenSSL library, used in a large number of websites and applications. It is being called one of the worst computer ...
0
votes
0answers
21 views

Credential Dialog, disabling default Realm information messages disclosing password

I'm using the QgsCredentialDialog for determining user access to the database. When a user is failing to log in correctly the log in credentials are shown in the dialog (Fig. 1). (success, uname, ...
1
vote
0answers
30 views

Consuming secured ArcGIS for Server services in Google Earth?

I am able to easily consume unsecured ArcGIS for Server (AGS) services in Google Earth (GE), but not secured services. I have created a KML Link in AGS Manager with no luck, and added the service ...
1
vote
2answers
137 views

Active Directory AND integrated user store on ArcGIS Server 10.2

We have one License for ArcGIS Server 10.2. We need to publish Services for internal use with Active Directory authentication and for external use (internet) with username/password authentication. ...
1
vote
2answers
180 views

Does ArcGIS for Server support others using own credentials (Single Sign On) for Federated Services?

I have a number of secured ArcGIS 10.2 for Server (AGS) services which a number of other companies use as well. At the moment we have created domain accounts on our domain which they need to access ...
2
votes
2answers
138 views

How to ensure that only my application has access to ArcGIS Server services

I'm making a web map based on the ArcGIS Server JS API. How can I ensure that users must use my front-end to access the ArcGIS Server layers? That is, I want anyone visiting MyDomain.com/index.html ...
1
vote
1answer
79 views

GeoServer; Blocking GeoServer-users' access to specific folders on host drives

Is it possible to adjust GeoServer in a way to block GeoServer-users' access to specific folders in the data directory? (I mean the actual folders on the computer drive where the shapefiles are ...
1
vote
0answers
211 views

Saved maps in geoexplorer (geoserver layer security)

I am a bit confused with the save maps function in geoexplorer. I have a vps server with the opengeo suite 3.1, I added a table to the vps local postgis db server to the geoserver.public database. I ...
2
votes
0answers
34 views

Protect our WMS map tiles to only accessible from our site [duplicate]

We are using geoserver (2.3) to serve WMS map tiles generated from mapping data we licenced. We use leaflet on the client side to show the map (part of a ruby on rails site running on heroku). Because ...
0
votes
1answer
106 views

Trouble implementing Key authentication in geoserver

I'm trying to implement key authentication in geoserver 2.3.3. The steps I followed are: Added the authkey plugin Created the authkey filter Secured the layers by assigning workspaces to different ...
4
votes
1answer
145 views

about token based authentication security

I am reading the authenticated services with token. I understand that a user have to get a token to using arcgis services. Example: https://domain.com/arcgis/rest/services/myMap/MapServer is my ...
2
votes
1answer
117 views

QGIS and SpatiaLite database: Setting user access permissions

SpatiaLite databases seems to match all my desires to store GIS layers and table. But an important question is: is it possible to limit writing to only one user ? If yes, what is the way to do it? I ...
2
votes
0answers
63 views

ArcGIS Server Security related justification

We just installed ArcGIS server(JAVA) and the network security has a few policy that requires us to provide justification on our setting. Does anyone have any reference document for the following ...
1
vote
1answer
164 views

GeoDjango - How to secure tile map services?

I use geodjango to create and serve tiles that I usually display into OpenLayers as openLayers.Layer.TMS I am worried that anybody could grab the tms URL and plug it into their own map without asking ...
1
vote
1answer
199 views

How to prevent data scraping in a web map?

I would like to use Leaflet or a Leaflet-like mobile-friendly library to produce a web map of points of interest, but I am concerned with how easy it is to just scrape the data from the javascript. Is ...
1
vote
1answer
103 views

(MapServer Osm) Map Accessibility

I have a tile server (MapCache) with a personalized map. For client side's rendering I use OpenLayers. I'd like my personalized cache to be accessible only on my web site, i.e. I don't want another ...
1
vote
1answer
181 views

problem to Disable the security in server.dat file

I am trying to remove the security from web services.While seaching , I found that we have to set <SecurityEnabled>True</SecurityEnabled> To ...
2
votes
2answers
666 views

GeoServer and OpenLayers in production - Securing WMS calls?

I've a mapping site where users have to login in with username and password. Once logged in the user gets a map of their data using WMS and WFS to display and edit data. This data is served using ...
3
votes
2answers
831 views

How to share a hosted feature service with an application on ArcGIS Online?

According to the ESRI REST API documentation on authentication, a registered application can log in to AGOL via an App ID and App Secret and will then have access to the data that has been shared with ...
5
votes
0answers
289 views

Create custom Authentication filter in GeoServer 2.3.0

Context In my current project, I've the requirement to validate that requests coming to GeoServer (2.3.0) are allowed. The project holds those facts: the GS client cannot provide the principal ...
3
votes
0answers
117 views

Geoserver administration - defining different privileges

I need to create separate admin accounts for Geoserver. I'd like to have one superadmin account that would be able to read/edit/delete any style, layergroup, workspace, store or layer - that is what ...
8
votes
3answers
4k views

Programmatic authentication to ArcGIS Server secured layers via RESTful API

I have an ArcGIS 10.1 Server instance exposing secured mapservices on the Internet. My need is to code down a client application (which I am currently building using the 3.3 version of the ArcGIS ...
4
votes
2answers
351 views

Data security for GIS Data (Esri shape files,Auto-cad files)

This is regarding security for GIS Data (in Esri & open source) (Esri shape files,Auto-cad files etc.) Does anyone know how to assign a password to or encrypt shapefiles OR CAD Data? I have ...
2
votes
0answers
66 views

Access control for SaaS-based GIS, which is the right way to go?

I'm currently researching on some access control models for SaaS-based GIS, and in the future would like to implement one. The common use cases would be like: some of the services, resources, layers, ...
2
votes
1answer
609 views

ArcGIS Server security and Windows domains - issues for non-IE browsers

I'm looking for some advice / experience in ArcGIS Server security with a Windows domain. Normally in this situation I would do some prototyping but I don't have access to a domain. I'm planning to ...
3
votes
1answer
1k views

Where is connection file used to connect ArcMap to ArcSDE?

In ArcMap 10.0, how do I find where the connection file is that is being used to connect to ArcSDE 10 on Sql Server 2008? Some non administrative users are hooking up to SDE as the user 'sde' with db ...
3
votes
3answers
753 views

Feature-level authorisation in ArcGIS Server REST services

Is feature-level authorisation even remotely possible when accessing ArcGIS (10) via the REST APIs? From what I understand I can secure individual services but at most this gives me control over who ...
1
vote
1answer
58 views

WCS row based security ?

I have an application where each user has individually generated geotiff files. Since the users pay for the generated geotiff, I have to make sure that the users can only see their own geotiff and not ...
9
votes
2answers
288 views

How do you protect your PostGIS credentials when using QGIS 1.7?

I'm fairly certain this should be a community wiki, but I don't know how to make it one. So if an admin sees this please change if appropriate. So.....How do you protect your PostGIS database data ...
13
votes
4answers
262 views

What simple, effective techniques for obfuscating points are available?

We are creating a website that will collect location information (points) from users. We are exploring techniques to preserve users' location privacy (e.g., often users will share their home address, ...
2
votes
2answers
253 views

Securing ArcGIS Server 10.x On .NET - User Store Point At LDAP

I have the fun job of securing ArcGIS Server, and one of the requirements is to use LDAP for authentication and authorization for services... For ArcGIS Server installed on Java backend it looks to ...
7
votes
6answers
361 views

How to handle sensitive geographic data?

You use sensitive geographic data every day. What are your strategies to protect them in your geographical information systems? What kind of architecture do you use? What encryption method do you ...
2
votes
1answer
97 views

Access Control List for web GIS

I need to implement Access Control List (ACL) for my web application and I need to know common practice of using permissions in GIS systems. What levels of acces exists: layer, feature, attribute, ...
17
votes
3answers
4k views

How to put GeoServer layers behind authentication?

I want to publish map layers using OpenLayers and GeoServer. While this is easy enough to set up, I'm a bit lost when it comes to authentication possibilities. What I want is to create different users ...
3
votes
2answers
342 views

Reload Geoserver with REST - password security

I've found the way to reload Geoserver by REST (Geoserver Configuration Reload), but my issue is about security of that solution. My reload request is fired from a bash script periodically, so it's ...
1
vote
2answers
477 views

GeoServer WFS Row Level Security?

I'm trying to implement row level security with GeoServer. I know out of the box it supports service, layer and REST security and not row level. However I'm sure there must be a work around. Has ...
0
votes
1answer
137 views

Securing AGS output, cache, and jobs folders

ArcGIS Server (for .NET) generates images, etc. in arcgisoutput, arcgiscache, and arcgisjobs folders. Can the AGS security system (specifically, token-based) be used to secure these folders in the ...
6
votes
1answer
3k views

Struggling with ArcGIS REST API and tokens

I'm doing my best to secure my AGS (9.3.1) services, but have struggled with tokens. As you can see, my nw account belongs to the agsadmin and agsusers roles: I have assigned these same roles to my ...
1
vote
2answers
177 views

Where deploy Custom Provider DLL for ArcGIS Server if GAC is not an option

I have a client that has developed a custom Membership Provider for ArcGIS server and cannot deploy the provider to the GAC. Does anyone know where we could put the DLL such that the ArcGIS Security ...
13
votes
4answers
397 views

Secure online GIS for sensitive data?

My company I started working for is looking to move from ArcInfo and MapPoint to an online GIS for easier data access/availability. Obviously the GIS capabilities needed are rather basic, but ...
10
votes
2answers
1k views

How to secure WFS services?

first time posting here.. Im currently tasked with finding a way to deploy wfs services to a number of clients. The services could be consumed by both desktop GIS software eg. MapInfo/ArcGis or by ...
18
votes
10answers
668 views

Would you consider online geocoding a breach of privacy?

Suppose I have a bunch of addresses of individuals participating in a certain study (most likely - health related, where privacy and ethical considerations are always important issues). Nowadays, ...
7
votes
9answers
1k views

WMS with Access Control (ACL) for different users? Or solution for thousands of points on web map?

I have a set of Sites in the thousands. Not all users see same the same Sites on the map - thus ACL. Data is stored in a non-GIS database (mssql, ora, etc) and right now is retrieved with a standard ...