2

As a followup of this question I am wondering how to enable a certain user to be able to place HTTP PUT/POST calls to /geoserver/rest/styles/ without granting the user admin rights or disabling chain security check under Authentication->Filter chain.

With my $geoserver_home/data/security/rest.properties settings being

/rest/**;GET=ROLE_REST_READ
/rest/**;POST,PUT,DELETE=ROLE_REST_WRITE 

I assigned user 'chief' the roles 'ROLE_REST_READ' and 'ROLE_REST_WRITE'.

When doing PUT/POST calls with this credentials it will result in Status Code 405 NOT ALLOWED. GET calls however work fine. Using admin credentials or disabling REST chain security check PUT/POST calls work fine (Status Code 200). I tried changing the REST chain settings (check HTTP method, role filter) with no luck. Changing the admin role of the current role service 'default' from ROLE_ADMIN to ROLE_REST_WRITE also works, giving user chief complete admin right over the web interface however.

How/where can I edit the REST filter chain settings to not block PUT/POST calls? Please excuse me if I am missing some basic filter chain points here as I am pretty new to this topic.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.