The processes and mechanisms by which computer-based equipment, information and services are protected from unintended or unauthorized access, change or destruction

learn more… | top users | synonyms

19
votes
5answers
6k views

How to put GeoServer layers behind authentication?

I want to publish map layers using OpenLayers and GeoServer. While this is easy enough to set up, I'm a bit lost when it comes to authentication possibilities. What I want is to create different users ...
18
votes
10answers
1k views

Would you consider online geocoding a breach of privacy?

Suppose I have a bunch of addresses of individuals participating in a certain study (most likely - health related, where privacy and ethical considerations are always important issues). Nowadays, ...
15
votes
3answers
10k views

Programmatic authentication to ArcGIS Server secured layers via RESTful API

I have an ArcGIS 10.1 Server instance exposing secured mapservices on the Internet. My need is to code down a client application (which I am currently building using the 3.3 version of the ArcGIS ...
13
votes
4answers
524 views

Secure online GIS for sensitive data?

My company I started working for is looking to move from ArcInfo and MapPoint to an online GIS for easier data access/availability. Obviously the GIS capabilities needed are rather basic, but ...
13
votes
4answers
347 views

What simple, effective techniques for obfuscating points are available?

We are creating a website that will collect location information (points) from users. We are exploring techniques to preserve users' location privacy (e.g., often users will share their home address, ...
11
votes
2answers
539 views

How do you protect your PostGIS credentials when using QGIS 1.7?

I'm fairly certain this should be a community wiki, but I don't know how to make it one. So if an admin sees this please change if appropriate. So.....How do you protect your PostGIS database data ...
11
votes
2answers
1k views

How to secure WFS services?

first time posting here.. Im currently tasked with finding a way to deploy wfs services to a number of clients. The services could be consumed by both desktop GIS software eg. MapInfo/ArcGis or by ...
9
votes
3answers
382 views

Managing content for multiple users within ArcGIS Collector App?

I have a hundreds of people collecting data. Each user has an ArcGIS Online login. I want to be able to filter content visible in the ArcGIS Collector App based on the logged in user, but don't want ...
8
votes
6answers
437 views

How to handle sensitive geographic data?

You use sensitive geographic data every day. What are your strategies to protect them in your geographical information systems? What kind of architecture do you use? What encryption method do you ...
8
votes
4answers
1k views

Enabling public viewers and private editors of feature service on ArcGIS Online For Organizations?

In ArcGIS Online For Organizations, how does one publish a hosted feature service that is shared with Everyone for viewing, while restricting editing to specific users or groups, and different kinds ...
8
votes
1answer
4k views

Struggling with ArcGIS REST API and tokens

I'm doing my best to secure my AGS (9.3.1) services, but have struggled with tokens. As you can see, my nw account belongs to the agsadmin and agsusers roles: I have assigned these same roles to my ...
8
votes
1answer
690 views

Create custom Authentication filter in GeoServer 2.3.0

Context In my current project, I've the requirement to validate that requests coming to GeoServer (2.3.0) are allowed. The project holds those facts: the GS client cannot provide the principal ...
7
votes
9answers
2k views

WMS with Access Control (ACL) for different users? Or solution for thousands of points on web map?

I have a set of Sites in the thousands. Not all users see same the same Sites on the map - thus ACL. Data is stored in a non-GIS database (mssql, ora, etc) and right now is retrieved with a standard ...
6
votes
1answer
481 views

about token based authentication security

I am reading the authenticated services with token. I understand that a user have to get a token to using arcgis services. Example: https://domain.com/arcgis/rest/services/myMap/MapServer is my ...
5
votes
5answers
365 views

What is the best way to protect data online?

What techniques do people use when protecting data (e.g., preventing a user downloading the whole dataset) they are overlaying on top of Google/Yahoo/Bing etc.?
5
votes
2answers
844 views

Data security for GIS Data (shapefiles,AutoCAD files)

This is regarding security for GIS Data (in Esri & open source) (Esri shapefiles, AutoCAD files etc.) Does anyone know how to assign a password to or encrypt shapefiles OR CAD Data? I have found ...
5
votes
2answers
319 views

Password Protect QGIS project

On a shared computer, I have a QGIS project which links up to a PostGIS database that contains my data. If a user wants to access layers from the db, they have to enter the db credentials, so that's ...
5
votes
1answer
193 views

Is it possible to set the permissions Geoserver creates new directories with?

I'm trying to automate the process of pushing from a server to Github as a way of tracking Geoserver changes, and pulling from Github as a way of deploying new work. The push side works fine, but if I ...
5
votes
1answer
309 views

ArcGis Python Security Concerns

I’m working for a large organization which are using ArcGis Desktop on some (windows) clients. The security requirements for the system is very strict, and a part of that is prohibiting the users the ...
4
votes
3answers
1k views

Feature-level authorisation in ArcGIS Server REST services

Is feature-level authorisation even remotely possible when accessing ArcGIS (10) via the REST APIs? From what I understand I can secure individual services but at most this gives me control over who ...
4
votes
2answers
2k views

How to share a hosted feature service with an application on ArcGIS Online?

According to the ESRI REST API documentation on authentication, a registered application can log in to AGOL via an App ID and App Secret and will then have access to the data that has been shared with ...
4
votes
1answer
387 views

Data Security for Geoserver - Users errantly seeing Workspaces not assigned to them

I'm having trouble with Data Security in my Geoserver 2.5 application. Let me preface my situation. I am using Geoexplorer composer which is making GeoServer API calls through ows and wms. I have ...
3
votes
1answer
119 views

Copy protection via license file for ModelBuilder models?

I've build a large model in the ArcGIS ModelBuilder and I want to share this toolbox with some other people BUT I don´t want to lose control over it. The first step was to set a password to my script, ...
3
votes
3answers
607 views

How to ensure that only my application has access to ArcGIS Server services

I'm making a web map based on the ArcGIS Server JS API. How can I ensure that users must use my front-end to access the ArcGIS Server layers? That is, I want anyone visiting MyDomain.com/index.html ...
3
votes
1answer
750 views

How do I change geoserver admin password?

I was wondering how can change the default password of geoserver admin from geoserver to something else? I have tried two different things, but none worked. First thing I tried following the online ...
3
votes
2answers
550 views

is OpenLayers proxy access secured?

I have secured my layers on Geoserver. Users can not access my layers without authenticated username and password. Now I created a proxy script with PHP. Proxy script sends request with username ...
3
votes
2answers
441 views

Reload Geoserver with REST - password security

I've found the way to reload Geoserver by REST (Geoserver Configuration Reload), but my issue is about security of that solution. My reload request is fired from a bash script periodically, so it's ...
3
votes
1answer
3k views

Where is connection file used to connect ArcMap to ArcSDE?

In ArcMap 10.0, how do I find where the connection file is that is being used to connect to ArcSDE 10 on Sql Server 2008? Some non administrative users are hooking up to SDE as the user 'sde' with db ...
3
votes
2answers
50 views

Web Service level IP restriction with ESRI Web Adaptors?

In order to restrict service usage when sharing a REST endpoint I'm looking for a way to control access of service based on an IP range with the ESRI web adapter. I know that this can be done with a ...
3
votes
1answer
43 views

ArcGIS Server 'HTTP and HTTPS' security switching back to HTTP on reboot

I have an Amazon EC2 instance running ArcGIS server 10.3.1. It has been running with security set https. I recently had to change security to mixed mode http and https. Now when the server reboots ...
3
votes
1answer
56 views

ESRI add-in not installed automatically after build (locked-down environment)

We are using Microsoft Visual Studio 2010 to compile ESRI ArcMap 10.0 add-ins. Generally it works without problems. But we have some PC with very high security policies. For example they have (beside ...
3
votes
0answers
301 views

ArcGIS Server 10.1 Integrated Windows Authentication with Token based

In ArcGIS Server 10.1 on Windows 7 and IIS, if wanting to secure services within an Intranet with Active Directory is that Integrated Windows Authentication ...
3
votes
0answers
176 views

Geoserver administration - defining different privileges

I need to create separate admin accounts for Geoserver. I'd like to have one superadmin account that would be able to read/edit/delete any style, layergroup, workspace, store or layer - that is what ...
3
votes
0answers
77 views

Access control for SaaS-based GIS, which is the right way to go?

I'm currently researching on some access control models for SaaS-based GIS, and in the future would like to implement one. The common use cases would be like: some of the services, resources, layers, ...
2
votes
2answers
612 views

GeoServer WFS Row Level Security?

I'm trying to implement row level security with GeoServer. I know out of the box it supports service, layer and REST security and not row level. However I'm sure there must be a work around. Has ...
2
votes
2answers
403 views

Using ArcSDE on an Oracle DB, how can I tell which users have permissions to a Feature Class

I created a new Feature Class, and I assigned some users SELECT privileges to that Feature Class. I want to look at the list of users that I have assigned privileges to, how do I do that? Updated ...
2
votes
2answers
920 views

Active Directory AND integrated user store on ArcGIS Server 10.2

We have one License for ArcGIS Server 10.2. We need to publish Services for internal use with Active Directory authentication and for external use (internet) with username/password authentication. ...
2
votes
1answer
176 views

QGIS and SpatiaLite database: Setting user access permissions

SpatiaLite databases seems to match all my desires to store GIS layers and table. But an important question is: is it possible to limit writing to only one user ? If yes, what is the way to do it? I ...
2
votes
2answers
2k views

GeoServer and OpenLayers in production - Securing WMS calls?

I've a mapping site where users have to login in with username and password. Once logged in the user gets a map of their data using WMS and WFS to display and edit data. This data is served using ...
2
votes
1answer
212 views

geoserver's geowebcache watermark setting

anyone here has used watermarking in geoserver? I have successfully set watermark to my WMS layer, but in my OpenLayers 3 project, I use 'Tiled': true WMS setting and my GeoWebCache doesn't display ...
2
votes
1answer
95 views

ArcGIS Server - Secured Services

Is there any way to tell, via the SOAP or REST APIs, if an ArcGIS Server map service requires an authenticated user? I have set an application to use a token service for accessing secured map ...
2
votes
1answer
190 views

Working with HTTPS, non-secure services and ArcGIS API for JavaScript?

Situation: I am currently working with an app that is required to be delivered over HTTPS because of an organizational security requirement. I currently do not have access to this servers ...
2
votes
1answer
1k views

ArcGIS Server security and Windows domains - issues for non-IE browsers

I'm looking for some advice / experience in ArcGIS Server security with a Windows domain. Normally in this situation I would do some prototyping but I don't have access to a domain. I'm planning to ...
2
votes
2answers
331 views

Securing ArcGIS Server 10.x On .NET - User Store Point At LDAP

I have the fun job of securing ArcGIS Server, and one of the requirements is to use LDAP for authentication and authorization for services... For ArcGIS Server installed on Java backend it looks to ...
2
votes
0answers
12 views

Can Geoserver pass visibility information to Accumulo

I have created a plug-in which allows my Geoserver to retrieve data from an Accumulo datastore. I want to enable the visibility cell in Accumulo to only return data based on information that the ...
2
votes
0answers
139 views

QGIS Server WFS/WMS user and pass authentication

I configured a qgis project as follows: As you can see, QGIS Server is now serving two layers using WFS or WMS service. These two layers don't have the user/pass parameters saved in their layer ...
2
votes
1answer
73 views

ArcGis Server: Separate Virtual Directories for Services?

This is a Windows system. As we know, ArcGIS Server creates a default 'arcgis' virtual directory in IIS and that becomes the starting point for various services. While that is a convenient 'one size ...
2
votes
1answer
169 views

Posting UserCredentials with AsyncTask of ArcGIS for Android?

My problem is that I want to get JSON data from ArcGIS for Server For example: http://xxxx.com/arcgis/rest/services/Map/MapServer/legend?f=pjson I can get and read JSON data from this URL but if ...
2
votes
1answer
94 views

Identifying user triggering ArcGIS Server invalid username or password error

Can anyone tell me if there is a way to identify the culprit of an "Invalid Username or Password" error in ArcGIS Server logs? For source, it just says 'Admin' for source, and nothing for User. Is ...
2
votes
0answers
37 views

Protect our WMS map tiles to only accessible from our site [duplicate]

We are using geoserver (2.3) to serve WMS map tiles generated from mapping data we licenced. We use leaflet on the client side to show the map (part of a ruby on rails site running on heroku). Because ...