Geographic Information Systems Stack Exchange is a question and answer site for cartographers, geographers and GIS professionals. It only takes a minute to sign up.
Sign up to join this community
I want GeoServer rest security setup so that only a specific role can access everything under a specific workspace. This is what my /datadir/security/rest.properties file looks like:
/**;GET=ADMIN
/**;POST,DELETE,PUT=ADMIN
/rest/workspaces/myworkspace/*;GET,POST,PUT,DELETE=myrole
But I get a 403 error with this:
curl "http://mygeoserver/geoserver/rest/workspaces/myworkspace/layers" -u "userinmyrole:password" -v
How can I secure a workspace in REST?
If someone is still looking for answer to this problem. Solution is to place you desired non root security restriction on top of the default admin restrictions. Therefore, the solution for the question is to place the last row on top of the two ones like this:
/rest/workspaces/myworkspace/*;GET,POST,PUT,DELETE=myrole
/**;GET=ADMIN
/**;POST,DELETE,PUT=ADMIN
The reason for this is that the last two security restrictions override the more specific one.
I tried to run Petteri's configuration, but there is one star missing. Putting an additional star in the first line (in front of the ";GET") solved it for me:
/rest/workspaces/myworkspace/**;GET,POST,PUT,DELETE=myrole
/**;GET=ADMIN
/**;POST,DELETE,PUT=ADMIN
