<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">Alessio!</div><div class=""><br class=""></div><div class="">thanks a lot for this great answer!</div><div class=""><br class=""></div><div class="">cheers,</div><div class=""><br class=""></div><div class="">toni</div>
<br class=""><div><blockquote type="cite" class=""><div class="">Am 14.03.2017 um 14:20 schrieb Alessio Fabiani <<a href="mailto:alessio.fabiani@geo-solutions.it" class="">alessio.fabiani@geo-solutions.it</a>>:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">Hello Toni,<div class="">sure.</div><div class=""><br class=""></div><div class="">Here you can find the GNIP for A&A refactor and realted PR</div><div class=""><br class=""></div><div class=""><a href="https://github.com/GeoNode/geonode/issues/2374" class="">https://github.com/GeoNode/geonode/issues/2374</a><br class=""></div><div class=""><br class=""></div><div class=""><a href="https://github.com/GeoNode/geonode/pull/2755" class="">https://github.com/GeoNode/geonode/pull/2755</a><br class=""></div><div class=""><br class=""></div><div class="">Also the detailed documentation is available on GeoNode docs here</div><div class=""><br class=""></div><div class=""><a href="http://docs.geonode.org/en/master/tutorials/admin/geoserver_geonode_security/index.html" class="">http://docs.geonode.org/en/master/tutorials/admin/geoserver_geonode_security/index.html</a><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Specifically about view and download permissions, here you can find the GNIP and PR:</div><div class=""><br class=""></div><div class=""><a href="https://github.com/GeoNode/geonode/issues/2696" class="">https://github.com/GeoNode/geonode/issues/2696</a><br class=""></div><div class=""><br class=""></div><div class=""><a href="https://github.com/GeoNode/geonode/pull/2698" class="">https://github.com/GeoNode/geonode/pull/2698</a><br class=""></div><div class=""><br class=""></div><div class="">GeoServer makes use of GeoFence advanced security subsystem in order to allow you to define grain-fined rules on layers. GeoNode handles them automatically, but you can also refine them manually via GeoServer admin interface.</div><div class=""><br class=""></div><div class="">Hope this helps,</div><div class="">Alessio.</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div></div><div class="gmail_extra"><br clear="all" class=""><div class=""><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr" class=""><div style="font-size:12.8px" class="">Best Regards,</div><div style="font-size:12.8px" class="">Alessio Fabiani.</div><div style="font-size:12.8px" class=""><br class=""></div><div style="font-size:12.8px" class=""><div class="">==</div><div class="">GeoServer Professional Services from the experts!</div><div class="">Visit <a href="http://goo.gl/it488V" target="_blank" class="">http://goo.gl/it488V</a> for more information.</div><div class="">==</div></div><div style="font-size:12.8px" class=""><br class=""></div><div style="font-size:12.8px" class="">Ing. Alessio Fabiani</div><div style="font-size:12.8px" class="">@alfa7691</div><div style="font-size:12.8px" class=""><a href="https://github.com/afabiani?tab=overview" style="font-size:12.8px" target="_blank" class="">github</a><br class=""></div><div style="font-size:12.8px" class="">Founder/Technical Lead</div><div style="font-size:12.8px" class=""><br class=""></div><div style="font-size:12.8px" class=""><div class="">GeoSolutions S.A.S.</div><div class="">Via di Montramito 3/A</div><div class="">55054 Massarosa (LU)</div><div class="">Italy</div><div class="">phone: +39 0584 962313</div><div class="">fax: +39 0584 1660272</div><div class="">mob: +39 <span style="font-size:12.8px" class="">331 6233686</span></div><div class=""><br class=""></div><div class=""><a href="http://www.geo-solutions.it/" target="_blank" class="">http://www.geo-solutions.it</a></div><div class=""><a href="http://twitter.com/geosolutions_it" target="_blank" class="">http://twitter.com/geosolutions_it</a></div></div><div style="font-size:12.8px" class=""><br class=""></div><div style="font-size:12.8px" class="">-------------------------------------------------------</div><div style="font-size:12.8px" class=""><br class=""></div><div style="font-size:12.8px" class=""><p class=""><span lang="IT" class=""><font size="1" class=""><b class="">AVVERTENZE AI SENSI DEL D.Lgs. 196/2003</b></font></span></p><p class=""><span lang="IT" class=""><font size="1" class="">Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.</font></span></p><div class=""><span lang="IT" class=""><font size="1" class=""> </font></span><br class="webkit-block-placeholder"></div><p class=""><font size="1" class="">The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.</font></p><p class=""><font size="1" class="">---------------------------------------------------------------------</font></p></div></div></div></div>
<br class=""><div class="gmail_quote">On Tue, Mar 14, 2017 at 2:10 PM, Toni Schönbuchner <span dir="ltr" class=""><<a href="mailto:toni.schoenbuchner@csgis.de" target="_blank" class="">toni.schoenbuchner@csgis.de</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word" class=""><div class="">Alessio sorry I´ve answered to fast.</div><div class="">Do you know if there is a GNIP or PR where I can read more about</div><div class="">this (prevent download directly) in 2.5+</div><div class=""><br class=""></div><div class="">cheers,</div><div class=""><br class=""></div><div class="">toni</div>
<br class=""><div class=""><blockquote type="cite" class=""><div class="">Am 14.03.2017 um 13:54 schrieb Alessio Fabiani <<a href="mailto:alessio.fabiani@geo-solutions.it" target="_blank" class="">alessio.fabiani@geo-<wbr class="">solutions.it</a>>:</div><br class="m_-7317970113285899273Apple-interchange-newline"><div class=""><div dir="ltr" class="">It would be better if you can use GeoNode 2.5+ with Oauth2 security and GeoServer as backend.<div class=""><br class=""></div><div class="">It will prevent you to download layer data on the backend side directly.</div></div><div class="gmail_extra"><br clear="all" class=""><div class=""><div class="m_-7317970113285899273gmail_signature" data-smartmail="gmail_signature"><div dir="ltr" class=""><div style="font-size:12.8px" class="">Best Regards,</div><div style="font-size:12.8px" class="">Alessio Fabiani.</div><div style="font-size:12.8px" class=""><br class=""></div><div style="font-size:12.8px" class=""><div class="">==</div><div class="">GeoServer Professional Services from the experts!</div><div class="">Visit <a href="http://goo.gl/it488V" target="_blank" class="">http://goo.gl/it488V</a> for more information.</div><div class="">==</div></div><div style="font-size:12.8px" class=""><br class=""></div><div style="font-size:12.8px" class="">Ing. Alessio Fabiani</div><div style="font-size:12.8px" class="">@alfa7691</div><div style="font-size:12.8px" class=""><a href="https://github.com/afabiani?tab=overview" style="font-size:12.8px" target="_blank" class="">github</a><br class=""></div><div style="font-size:12.8px" class="">Founder/Technical Lead</div><div style="font-size:12.8px" class=""><br class=""></div><div style="font-size:12.8px" class=""><div class="">GeoSolutions S.A.S.</div><div class="">Via di Montramito 3/A</div><div class="">55054 Massarosa (LU)</div><div class="">Italy</div><div class="">phone: <a href="tel:0584%20962313" value="+390584962313" target="_blank" class="">+39 0584 962313</a></div><div class="">fax: <a href="tel:0584%20166%200272" value="+3905841660272" target="_blank" class="">+39 0584 1660272</a></div><div class="">mob: +39 <span style="font-size:12.8px" class=""><a href="tel:331%20623%203686" value="+393316233686" target="_blank" class="">331 6233686</a></span></div><div class=""><br class=""></div><div class=""><a href="http://www.geo-solutions.it/" target="_blank" class="">http://www.geo-solutions.it</a></div><div class=""><a href="http://twitter.com/geosolutions_it" target="_blank" class="">http://twitter.com/<wbr class="">geosolutions_it</a></div></div><div style="font-size:12.8px" class=""><br class=""></div><div style="font-size:12.8px" class="">------------------------------<wbr class="">-------------------------</div><div style="font-size:12.8px" class=""><br class=""></div><div style="font-size:12.8px" class=""><p class=""><span lang="IT" class=""><font size="1" class=""><b class="">AVVERTENZE AI SENSI DEL D.Lgs. 196/2003</b></font></span></p><p class=""><span lang="IT" class=""><font size="1" class="">Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.</font></span></p><div class=""><span lang="IT" class=""><font size="1" class=""> </font></span><br class="m_-7317970113285899273webkit-block-placeholder"></div><p class=""><font size="1" class="">The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.</font></p><p class=""><font size="1" class="">------------------------------<wbr class="">------------------------------<wbr class="">---------</font></p></div></div></div></div>
<br class=""><div class="gmail_quote">On Tue, Mar 14, 2017 at 1:47 PM, Toni Schönbuchner <span dir="ltr" class=""><<a href="mailto:toni.schoenbuchner@csgis.de" target="_blank" class="">toni.schoenbuchner@csgis.de</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word" class="">Hi,<div class=""><br class=""></div><div class="">I´ve tested this on a fresh 2.4 installation from repository and apt on Ubuntu 14.04.</div><div class="">(Unfortunately I cannot login to <a href="http://demo.geonode.org/" target="_blank" class="">demo.geonode.org</a> to show this behavior)</div><div class=""><br class=""></div><div class="">- On a fresh installation I´ve installed Demo Layers with Paver</div><div class="">- Next created a map with three layers</div><div class="">- One of those layers has download permission set to registered users only</div><div class=""><br class=""></div><div class="">Now, when an<b class=""> unregistered User</b> downloads the map data a notice appears</div><div class="">that one layer cannot be downloaded due to permissions (correct so far) BUT </div><div class="">the zip contains this layer regardless of it´s download permissions.</div><div class=""><br class=""></div><div class="">Is this a known Bug? If not I would open an issue on github.</div><div class=""><br class=""></div><div class="">cheers,</div><div class=""><br class=""></div><div class="">Toni</div></div><br class="">______________________________<wbr class="">_________________<br class="">
geonode-users mailing list<br class="">
<a href="mailto:geonode-users@lists.osgeo.org" target="_blank" class="">geonode-users@lists.osgeo.org</a><br class="">
<a href="https://lists.osgeo.org/mailman/listinfo/geonode-users" rel="noreferrer" target="_blank" class="">https://lists.osgeo.org/mailma<wbr class="">n/listinfo/geonode-users</a><br class="">
<br class=""></blockquote></div><br class=""></div>
</div></blockquote></div><br class=""></div></blockquote></div><br class=""></div>
</div></blockquote></div><br class=""></body></html>