If you go to GeoServer, layer preview, by clicking "KML" in the "Common formats" column you get a KML file that contains a URL that can be used to get all information for a layer. For example:
This is a WMS request (it contains
service=WMS). I thought WMS requests only download images, but this request downloads the full data for the layer, including the coordinates of the lines (essentially the layer in vector format). I thought you'd need to use WFS for that.
The thing is that I want to permit a user to view the image of a layer (on a Leaflet map), but I don't want users to be able to download the data for the layer. I deactivated WFS for unauthorized users, but that isn't enough if they can get a KML with WMS.
What have I understood wrong? How can I fix this?