My main purpose is creating a set of users with specific roles.

I'm running GeoServer 2.13.

On the first step I wanted to create a role with access to one workspace - "UNIVERSITY"

So I've created:

  • A new user "test_student" in Default XML user/group service.
  • A new role "STUDENT" without parents.
  • A rule for the "STUDENT" role with a permission to write all layers and groups in workspace "UNIVERSITY".

created permissions for read and write

Then I logged in the GeoServer account under the new user (test_student) and got nothing:

enter image description here

But I expected to get all layers in specified workspace. By the way when I set "ADMIN" as a parent for my role "STUDENT" I got all data without any restrictions.

How to solve this problem?

  • You need to have read access to see a layer
    – Ian Turton
    Dec 17, 2018 at 12:04
  • @IanTurton Unfortunately, It doesn't help me. I've created 2 rules (divided "read" and "write"): "UNIVERSITY.*.r", "UNIVERSITY.*.w" and got the same result. Dec 17, 2018 at 12:10

1 Answer 1


Due to solve the problem it needs to switch on the catalog mode to MIXED or CHALLENGE (default state is HIDE).

So, we get the "HIDE" catalog mode doesn't show us geoserver sections (workspaces, stores, layers etc) but other modes allow us to see all sections on the left bar and layers inside.

enter image description here

Available layers:

enter image description here

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.