The processes and mechanisms by which computer-based equipment, information and services are protected from unintended or unauthorized access, change or destruction
1
vote
0answers
26 views
How to share a hosted feature service with an application on ArcGIS Online?
According to the ESRI REST API documentation on authentication, a registered application can log in to AGOL via an App ID and App Secret and will then have access to the data that has been shared with ...
3
votes
0answers
58 views
Create custom Authentication filter in GeoServer 2.3.0
Context
In my current project, I've the requirement to validate that requests coming to GeoServer (2.3.0) are allowed.
The project holds those facts:
the GS client cannot provide the principal ...
3
votes
0answers
77 views
Geoserver administration - defining different privileges
I need to create separate admin accounts for Geoserver. I'd like to have one superadmin account that would be able to read/edit/delete any style, layergroup, workspace, store or layer - that is what ...
7
votes
3answers
646 views
Programmatic authentication to ArcGIS Server secured layers via RESTful API
I have an ArcGIS 10.1 Server instance exposing secured mapservices on the Internet.
My need is to code down a client application (which I am currently building using the 3.3 version of the ArcGIS ...
0
votes
0answers
21 views
Mixed Content Warning on Secured ArcGIS SOAP Service in IE
I am accessing a secured ArcGIS SOAP service with ?wsdl at the end. When I try to open the service in IE, I get a mixed content (https & http) warning. I do not get that warning when I try to ...
0
votes
0answers
43 views
Does GeoXACML misunderstand XACML workflow?
In the past few days, I have been diving into GeoXACML and have read several articles. What has made me quite confusing is that those GeoXACML papers write that GeoXACML(PEP) intercepts both the ...
3
votes
1answer
149 views
Data security for GIS Data (Esri shape files,Auto-cad files)
This is regarding security for GIS Data (in Esri & open source) (Esri shape files,Auto-cad files etc.)
Does anyone know how to assign a password to or encrypt shapefiles OR CAD Data?
I have ...
2
votes
0answers
44 views
Access control for SaaS-based GIS, which is the right way to go?
I'm currently researching on some access control models for SaaS-based GIS, and in the future would like to implement one. The common use cases would be like: some of the services, resources, layers, ...
2
votes
1answer
250 views
ArcGIS Server security and Windows domains - issues for non-IE browsers
I'm looking for some advice / experience in ArcGIS Server security with a Windows domain. Normally in this situation I would do some prototyping but I don't have access to a domain.
I'm planning to ...
2
votes
1answer
371 views
Where is the connection file used to connect to ArcSDE 10?
In ArcMap 10.0, how do I find where the connection file is that is being used to connect to ArcSDE 10 on Sql Server 2008?
Some non administrative users are hooking up to SDE as the user 'sde' with db ...
3
votes
3answers
362 views
Feature-level authorisation in ArcGIS Server REST services
Is feature-level authorisation even remotely possible when accessing ArcGIS (10) via the REST APIs? From what I understand I can secure individual services but at most this gives me control over who ...
1
vote
1answer
48 views
WCS row based security ?
I have an application where each user has individually generated geotiff files.
Since the users pay for the generated geotiff, I have to make sure that the users can only see their own geotiff and not ...
9
votes
2answers
213 views
How do you protect your PostGIS credentials when using QGIS 1.7?
I'm fairly certain this should be a community wiki, but I don't know how to make it one. So if an admin sees this please change if appropriate.
So.....How do you protect your PostGIS database data ...
13
votes
4answers
206 views
What simple, effective techniques for obfuscating points are available?
We are creating a website that will collect location information (points) from users. We are exploring techniques to preserve users' location privacy (e.g., often users will share their home address, ...
2
votes
2answers
158 views
Securing ArcGIS Server 10.x On .NET - User Store Point At LDAP
I have the fun job of securing ArcGIS Server, and one of the requirements is to use LDAP for authentication and authorization for services...
For ArcGIS Server installed on Java backend it looks to ...
7
votes
6answers
314 views
How to handle sensitive geographic data?
You use sensitive geographic data every day.
What are your strategies to protect them in your geographical information systems?
What kind of architecture do you use?
What encryption method do you ...
1
vote
0answers
58 views
Access Control List for GIS
I need to implement Access Control List (ACL) for my web application and I need to know common practice of using permissions in GIS systems. What levels of acces exists: layer, feature, attribute, ...
14
votes
3answers
2k views
How to put GeoServer layers behind authentication?
I want to publish map layers using OpenLayers and GeoServer. While this is easy enough to set up, I'm a bit lost when it comes to authentication possibilities. What I want is to create different users ...
3
votes
2answers
261 views
Reload Geoserver with REST - password security
I've found the way to reload Geoserver by REST (Geoserver Configuration Reload), but my issue is about security of that solution. My reload request is fired from a bash script periodically, so it's ...
1
vote
2answers
331 views
GeoServer WFS Row Level Security?
I'm trying to implement row level security with GeoServer. I know out of the box it supports service, layer and REST security and not row level. However I'm sure there must be a work around. Has ...
0
votes
1answer
119 views
Securing AGS output, cache, and jobs folders
ArcGIS Server (for .NET) generates images, etc. in arcgisoutput, arcgiscache, and arcgisjobs folders. Can the AGS security system (specifically, token-based) be used to secure these folders in the ...
6
votes
1answer
2k views
Struggling with ArcGIS REST API and tokens
I'm doing my best to secure my AGS (9.3.1) services, but have struggled with tokens. As you can see, my nw account belongs to the agsadmin and agsusers roles:
I have assigned these same roles to my ...
1
vote
2answers
129 views
Where deploy Custom Provider DLL for ArcGIS Server if GAC is not an option
I have a client that has developed a custom Membership Provider for ArcGIS server and cannot deploy the provider to the GAC. Does anyone know where we could put the DLL such that the ArcGIS Security ...
13
votes
4answers
334 views
Secure online GIS for sensitive data?
My company I started working for is looking to move from ArcInfo and MapPoint to an online GIS for easier data access/availability. Obviously the GIS capabilities needed are rather basic, but ...
8
votes
2answers
665 views
How to secure WFS services?
first time posting here..
Im currently tasked with finding a way to deploy wfs services to a number of clients. The services could be consumed by both desktop GIS software eg. MapInfo/ArcGis or by ...
16
votes
9answers
514 views
Would you consider online geocoding a breach of privacy?
Suppose I have a bunch of addresses of individuals participating in a certain study (most likely - health related, where privacy and ethical considerations are always important issues).
Nowadays, ...
7
votes
9answers
1k views
WMS with Access Control (ACL) for different users? Or solution for thousands of points on web map?
I have a set of Sites in the thousands. Not all users see same the same Sites on the map - thus ACL. Data is stored in a non-GIS database (mssql, ora, etc) and right now is retrieved with a standard ...
2
votes
2answers
296 views
Using ArcSDE on an Oracle DB, how can I tell which users have permissions to a Feature Class
I created a new Feature Class, and I assigned some users SELECT privileges to that Feature Class. I want to look at the list of users that I have assigned privileges to, how do I do that?
Updated
...
5
votes
5answers
320 views
What is the best way to protect data online?
What techniques do people use when protecting data (e.g., preventing a user downloading the whole dataset) they are overlaying on top of Google/Yahoo/Bing etc.?
27
votes
11answers
1k views
Geocoding that's anonymous, good, and free - does it exist?
For a one-time project, I need to geocode a few thousand addresses. In the past I've used various online resources for this kind of thing (e.g., Google Maps API), but the addresses I'm working with ...
