Questions tagged [security]

The processes and mechanisms by which computer-based equipment, information and services are protected from unintended or unauthorized access, change or destruction

Filter by
Sorted by
Tagged with
0 votes
0 answers
53 views

Protect my GeoJSON in Leaflet

My GeoJSON map is published by Leaflet, how can prevent download from user who want to steal it? I'd taken long time to prepare GeoJSON and I want to preserve my effort. Any suggestion? Do I need to ...
user avatar
4 votes
1 answer
112 views

Anonymize site locations

I'm putting together some training materials for a workshop on R for spatial data analysis in archaeology, and need to anonymize the true site locations (confidential information) while keeping the ...
user avatar
  • 143
0 votes
1 answer
96 views

Protecting Vector Tile Server Data

I am deploying a Vector Tile Server on AWS with data I don't want to make publicly available and there are two main elements I want to cover regarding the security of the data The tile server needs ...
user avatar
1 vote
1 answer
343 views

Dealing with log4j vulnerability in FME products

Is there a way to mitigate any risk associated with the log4j vulnerability in FME Products? FME Desktop FME Server FME License Server (FlexLM)
user avatar
  • 21.4k
3 votes
1 answer
456 views

Dealing with log4j vulnerability in ArcGIS Enterprise products

Is there a way to deal with the log4j vulnerability in the ArcGIS Enterprise products? Portal for ArcGIS ArcGIS Server ArcGIS Datastore
user avatar
  • 21.4k
1 vote
2 answers
449 views

Log4J vulnerability handling in QGIS

I am using QGIS in a work environment so it is critical to know if and how QGIS is affected by the Log4J vulnerability. There are affected software lists, where I cannot find QGIS on, eg. here or here....
user avatar
  • 313
0 votes
0 answers
53 views

Protecting ArcPy Files (.py) [duplicate]

I'm writing a program in ArcGIS with Python language (ArcPy). I would like to publish it as a commercial program, but ArcPy or ToolBox script is not secure, because ToolBox can be converted to .py ...
user avatar
0 votes
1 answer
175 views

Leaflet Tilelayer from Mapbox with URL restrictions

I’m having great difficulty with this topic. I’m building a Gatsby/React mapping web app for the Swiss paddlesports community (GitHub repo) using Leaflet to load a custom tile layer from Mapbox. I’d ...
user avatar
0 votes
1 answer
70 views

Setting up SAML access to Portal for ArcGIS (via Reverse Proxy Server)

We are having several Portal for ArcGIS installations behind a reverse-proxy server (Nevis) and would like to configure SAML access to them. We have followed the doc available online (e.g. definition ...
user avatar
  • 1,241
1 vote
1 answer
65 views

How to restrict features that users can see by area?

Basically I have around 10 tables that are worked by several teams of users. What I need to avoid is team A complaining that team B got a better area to work on or worse, having them sabotaging each ...
user avatar
  • 2,210
0 votes
1 answer
114 views

Unauthorized SQL Query Execution warning- ArcGIS map services

A security scan of an application I maintain that uses several ArcGIS 10.7.1 map services (hosted with stand alone ArcGIS Server, not Enterprise, on AWS server, with IIS as web server) produced this ...
user avatar
  • 580
0 votes
0 answers
122 views

ArcGIS Portal not working with LDAP users

I have set user identity store of ArcGIS Portal administration page like following. { "type": "LDAP", "properties": { "userPassword": "secret",...
user avatar
  • 1,624
1 vote
0 answers
54 views

Secured WMS call from web application

I have a GIS application where users have to login in with username and password. The WMS is served using GeoServer and displayed using OpenLayers. I need to restrict WMS layers. I want to access the ...
user avatar
-1 votes
1 answer
31 views

User privileges

My query is just about security level How can a layer be secured with username and password only that user can see that layer? And if other user logged in but access is not given to him for that ...
user avatar
  • 1
2 votes
1 answer
212 views

Rules and roles in GeoServer not working

I have in a GeoServer (v2.16) two workspaces, with associated users and roles for those users. The file in /opt/geoserver/data_dir/security/layers.properties looks like this: #Thu Mar 12 10:44:20 ...
user avatar
  • 1,053
0 votes
1 answer
85 views

Block user after 3 attempts of login

Do you know if there is a way to block a user after 3 attempts of login? I was looking for information about but I haven't find anything.
user avatar
  • 9
0 votes
0 answers
53 views

Allowing ArcGIS Server accessing our Geodatabase Enterprise over the web

In my organization there is an installation of ArcGIS Server that is linked with an Enterprise geodatabase (PostgreSQL) in a DMZ for editing only over the web. However, we have another installation ...
user avatar
0 votes
1 answer
314 views

Data security under WebGIS by QGIS [closed]

We would like to offer our Client a webGIS solution for showing/Monitoring their data. Based on my Knowledge WebGIS by ESRI would be helpful and provide the user with the Login Information and it is ...
user avatar
1 vote
0 answers
57 views

Is there any open source implementation of GeoXACML based access control mechanism for OGC Web Services?

I am looking for an open source implementation of GeoXACML PEP, PDP to provide access control to my OGC web services. I have already set-up SAML based authentication. I found a non-opensource ...
user avatar
  • 11
1 vote
1 answer
357 views

Unauthenticated sensitive Information Disclosure - ArcGIS REST services

Recently a security audit has been done on our servers and applications which has ArcGIS enterprise installed on it. Our Architecture setup : We have ArcGIS installed on the server, ArcGIS exposes ...
user avatar
1 vote
0 answers
158 views

Is there an advantage to installing an ArcGIS web adaptor in the DMZ

I'm trying to architect a new ArcGIS Portal site. I see ESRI has instructions on configuring a reverse proxy to work with a web adapter installed on the network. However I have also seen sources ...
user avatar
  • 2,284
-1 votes
1 answer
960 views

Getting a token access to feature layer using Postman and Python

I am trying to query a feature server using postman as ESRI'S documentation: https://developers.arcgis.com/labs/rest/get-an-access-token/ I have succesfully added the Authorization to the body of the ...
user avatar
  • 143
1 vote
1 answer
163 views

Stop ArcGIS 'Geodatabase Adminstration' Reporting Connection as 'DBO' Instead of My Username?

We are running ArcGIS 10.5.1 and MS SQL Server, and using an SDE connection file which is configured to use 'Operating System' credentials. When most users connect, the 'Geodatabase Administration' ...
user avatar
1 vote
1 answer
169 views

Is it possible to migrate users from one ArcGIS Server instance to different one

We are planning to consolidate 2 ArcGIS Server instances, by migrating all services and users from one into the other. So users are stored in json files: { "username": "foo", "password": "...
user avatar
  • 147
0 votes
1 answer
673 views

Security of GeoServer WMS layer URL

How can I secure my WMS layer URL on GeoServer as whenever a WMS layer is loaded from GeoServer than the layer URL can be easily seen in the browser console?
user avatar
1 vote
0 answers
147 views

Securing one single WMS layer on GeoServer

My aim is to secure one specific layer (ex. topp:states) with username and password. I tried a couple of combinations in the layer.properties file. *.*.r=* *.*.w=GROUP_ADMIN,ADMIN topp.states.r=...
user avatar
12 votes
3 answers
1k views

Is licensed file geodatabase really secure?

I am planning to deliver our geo data in Licensed File Geodatabase format. This option was quite impressive as customer can have good look of the data with limitation and expiry date before purchasing....
user avatar
  • 1,906
2 votes
2 answers
456 views

Geoserver JDBC User Group Services Problem

I use the Geoserver 2.11.4 version in Windows.I am adding the JDBC service to the PostgreSQL database using JDBC Users and Group Services. Next, I add a Provider for JDBC that I created using the JDBC ...
user avatar
0 votes
1 answer
29 views

Enabling service sharing in ArcGis Online?

I am an admin for my organization. I enabled both Allow Anonymous Access and Member can share content publicly under the security panel. I am trying to connect a webservice we host that is in an ...
user avatar
  • 345
1 vote
1 answer
174 views

How can I block WMTS GetCapabilities Link

I want to block to below link like WMS services. http://localhost:8080/geoserver/gwc/service/wmts?REQUEST=GetCapabilities In services, WMS method's has "GetCapabilities" and selected roles only "...
user avatar
  • 129
1 vote
1 answer
2k views

openlayers 4 method forEachLayerAtPixel() throws SecurityError: The operation is insecure

Working with GeoExt 3.1.0, ExtJS 6.2.0 and Open Layers 4.4.1. I am trying to select a layer on my map with the singleclick event so I can use layer.getSource().getGetFeatureInfoUrl and display the ...
user avatar
2 votes
1 answer
426 views

Configuring security for WFS layer

We are using GeoServer 2.8, PostgreSQL 9.6 & QGIS 2.16 on our side. We have certain WFS layers. As per documentation disabled Anonymous WFS access and looking more settings for Web part. However ...
user avatar
  • 4,715
2 votes
0 answers
464 views

Restrict access to geoserver's web administration interface [closed]

I am a bit worried because the web administration interface for my geoserver is open to everybody. Of course there is a password set, but I wonder if it is reasonable to block access to the padel from ...
user avatar
  • 3,353
2 votes
0 answers
89 views

Boundless Suite - Composer Security Permissions [closed]

I’m having trouble getting users-roles-data access rules correctly configured in the Boundless Suite 4.9.1.  The issue appears to be with Composer, not Geoserver. BLUF:  I want 2 separate editors for ...
user avatar
3 votes
1 answer
930 views

Adding a security layer to my tile server [closed]

I have a tile server (apache2 + mod_tile serving OpenStreetMap data) that I'm going to use via Leaflet. Everything's working fine but before putting this public, I have a big concern about the ...
user avatar
1 vote
1 answer
1k views

How to Access Secured ArcGIS Online Services from a Custom JS Web app?

I have some Layers Hosted on my company's ArcGIS Online Account. I want to make a Custom WebMapping Application hosted on our public server, which General Public can use without Logging in. I'm ...
user avatar
0 votes
1 answer
167 views

Setting SSL Cipher Suites in Portal Admin

I am trying to update the SSL cipher suites (to be in compliance with my org security requirements) at '/portal/portaladmin/security/sslCertificates/update' according to this page I am getting: ...
user avatar
1 vote
0 answers
596 views

Password protected WMS in Openlayers 4

I would like to use OpenLayers to access a Wms, which is protected by a password. Unfortunately, I find no solution to this problem. My problem is in particular that I want to prevent that password ...
user avatar
  • 11
4 votes
1 answer
380 views

Parametrized queries for ArcGIS?

Since our ArcGIS applications are developed as desktop and as server applications, I'm looking for a way create our SQL-queries in a safe way. The state of the art to mitigate SQL-injection is, to use ...
user avatar
1 vote
1 answer
332 views

Geoserver/Geofence - Trigger Authentication

Geoserver Catalog MIXED mode in Data Security section is perfect for my purposes since I want to trigger an alert for authentication whenever a specific layer is requested. Since I need to create ...
user avatar
2 votes
1 answer
1k views

Openlayers 3 getting 401 error from geoserver with secured layers

I have an OL3 webmap that is attempting to access services from Geoserver that is running on a server on our internal network that uses LDAP logins using windows credentials. I found this link (...
user avatar
  • 336
34 votes
4 answers
32k views

Windows security warning (ActiveX) when clicking into fields in ArcToolbox tool?

I have been running ArcGIS 10.5 on my PC (Windows 10 Home) since December with no issues. This past week I have started to get ActiveX Security Warnings when I click into a parameter field in any ...
user avatar
  • 29.2k
2 votes
1 answer
390 views

Disabling access to ArcGIS Server Manager externally?

The background of my server I installed the ArcGIS server 10.3.1 (No Web Adaptor installed) I have Windows 2012 Server x64 with SQL Server 2012 R2. I'm also using IIS 8 as a web server on the same ...
user avatar
0 votes
1 answer
217 views

Geoserver layers access

I need to change the layer visibility for users in my application. Layers are served by OL 3 by a wms/wfs request. The problem is that when I change the accessibility for users, banning someone to see ...
user avatar
2 votes
1 answer
335 views

Is it recommended to change Geoserver admin username?

The docs and a bunch of other questions on here are circulated around changing the default password for admin on GeoServer. I know it's highly recommended to change the default password for the admin ...
user avatar
  • 207
8 votes
2 answers
864 views

Kaspersky Dangerous Object when installing QGIS 2.18

When I install QGIS 2.14 and 2.18, Kaspersky gives me a Dangerous Object message. Below is a screen shot of the quarantine. Is this something I need to worry about?
user avatar
1 vote
0 answers
148 views

Keeping properties secure within mapbox-gl

Simply put, how could one develop a mapbox-gl application where the properties are secured ? For example, take a look at this simple mapbox-gl map with properties: http://jsbin.com/hovawa/edit?...
user avatar
1 vote
0 answers
558 views

ArcGIS Server getToken Encrypted Password with Python

I originally posted this in the geonet, but unfortunately got crickets. I'd like to fetch an ArcGIS Server token with a python web service and an encrypted password. I have it working nicely with ...
user avatar
2 votes
0 answers
517 views

GeoServer 2.7.4 admin/geoserver password remains the same [closed]

This solution presented here: How do I change geoserver admin password? doesn't work. I have GeoServer 2.7.4 up and running, I went into the admin pane/ users, changed the default password, still no ...
user avatar
3 votes
2 answers
261 views

Spectrum Server Analyst on AWS

I have installed Spectrum Server/SSA from Pitney Bowes on an AWS server and opened the ports to all traffic. The default site opens when I am logged in on the AWS VM, but not from any other computer. ...
user avatar
  • 7,616