[Qgis-developer] qgis-mapserver: user authentication

[Pirmin Kalberer]

Hi Paolo & Giovanni,

Am Dienstag, 14. Juni 2011, 02.12:07 schrieb Giovanni Manghi:
> Hi all,
> 
> On Thu, 2011-06-09 at 16:33 +0200, Paolo Cavallini wrote:
> > Hi all.
> > We are interested in an extension of current qgis-mapserver, allowing
> > different users (or groups of) to see different layers (or different
> > projects).
> > Is anyone working on that, or willing to collaborate on a mainstream
> > solution?
> 
> what we need to develop is quite simple (to explain). Users should be
> able to register/login in the webclient (users data stored in a
> geometryless table in the qgis project?), then, depending on what user
> group the user belong, show certain layers/groups in the TOC of the web
> client. User data (name, address, etc.) should be stored after the login
> to allow use them in the print layouts.
> 
> One way or another we will have to develop something like that, so we
> would prefer to do it the right way, upstream and in a way that can be
> useful to as much people as possible.
> 

I don't think that authentication should be built into a WMS server. There are 
many solutions around, doing authentication and authorisation transparently on 
top of a WMS server:
* http://52north.org/communities/security/index.html
* http://geoprisma.org/site/index.php
* https://sites.google.com/site/geoshieldproject/home
* http://www.secureows.org/

Integration into QGIS Webclient will need some work, I suppose, but there 
should be no change in QGIS Server.

Regards
Pirmin

-- 
Pirmin Kalberer
Sourcepole  -  Linux & Open Source Solutions
http://www.sourcepole.com