[Geoprisma-users] Security and user authentication - open question

[paweluz]

Hi!

I wrote an application using GWT
(http://sourceforge.net/projects/gwt-openlayers/), OL2.8, Geoserver2.0.1 and
PostGIS. The user is able to view, save, delete and modify data using web
browser. Now I have been thinking about a way to limit the functionality to
the user.
For example:
- only the admin user can modify data.  
- only some users can view the specific layers
- the anonymous user can just watch few layers
I have been reading about some authentication with geoserver:
http://docs.geoserver.org/stable/en/user/security/sec_layer.html

I have found information about GeoPrisma in some topic in geoserver forum. I
have been wondering is there a way to use it in my application. I know that
that GeoPriosma was written in PHP so I am guessing this is not hood idea in
my case since I have been writing application in JAVA (GWT). 
I have also been reading that Geoserver has implemented Acegi security. This
is using basic authorization - but I found out that this is rather not save,
especially if your application and server is on the different machine. 
I know that Acegi used in Geoserver may work with CAD or LDAP, but it is
quite difficult to use.

I know this is a really open question, but my programing experience is
actually a little short, and I would very appreciate any help.

So to sum up:
- Is there a way to use Geoserver authorization (Acegi) from outside, in
client application, and is this save enough (this question for users that
have some experience with geoserver)
- Is it possible to use GeoPrisma with java technology (GWT) - since it was
written in PHP??

I am completely new in security subject and I honestly have no idea what to
choose... Maybe for someone this is really simple... 

Regards,
Poul 
-- 
View this message in context: http://n3.nabble.com/Security-and-user-authentication-open-question-tp683209p683209.html
Sent from the GeoPrisma-users mailing list archive at Nabble.com.