<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1476" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Hi All,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Lately we have had a few scenarios where we need to
limit the level of information for particular users. In one instance, we even
had to set up over 20 different levels of access. So far I
used </FONT><FONT face=Arial size=2>server-side scripting, or created
separate mapfiles. But this is not flexible, and can get very complex
(especially with querying using chameleon).</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I thought it could be very useful to have a
"security" attribute in classes and layers. You could imagine this as a layer or
a class simply being ignored when the mapobject is built. Or perhaps a
temporary copy of the mapfile is created, stripped of all objects that don't
satisfy the security-level. The security attribute could be a delimited list of
the users that are allowed to view the information. The username could be picked
up from the web-server (in PHP I use the REDIRECT_REMOTE_USER server-variable in
Apache 2.52; this would allow a nice integration with existing security
mechanisms). I thought this would be a very convenient and flexible
way to have different levels of access. Of course the original mapfile can not
be publically accessable when security is applied.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Does anyone have any other approach to applying
different levels of security? I'd be very happy to hear about other
solutions.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>regards,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Jacob</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>JACOB DELFOS<BR>SPATIAL INFORMATION
ANALYST<BR>Maunsell Australia Pty Ltd<BR>629 Newcastle Street, WA 6007<BR>PO Box
81, WA 6902<BR>Leederville <BR>Western Australia<BR>ABN 20 093 846
925</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Tel + 61 8 9281
6185<BR>Fax + 61 8 9281 6297<BR><A
href="mailto:jacob.delfos@maunsell.com">jacob.delfos@maunsell.com</A></FONT></DIV></BODY></HTML>