[mapguide-users] Allow access to different layers based on login

[Zac Spitzer]

are there relevant bugs in trac? i had a quick browse but couldn't find any

can we add a security component to trac?

(wish we could assign multiple components to a single issue and
making the field headers like components a hyperlink to all issues
for that component, but I'm just a spoilt old jira junkie)

also related is allowing ldap for user auth and getting rid of the stupid
case sensitive usernames, using XML has quite a few drawbacks

there's a swag of security related items here aren't there? definitely
need an RFC

I reckon autodesk's commercial customers would love this too
and it probably is a show stopper for a lot of larger companies evaluating MG

z


On Wed, May 20, 2009 at 3:42 PM, Jason Birch <Jason.Birch at nanaimo.ca> wrote:
> I don't see a lot of use for a login UI without also fixing the MapGuide security model and improving the way it deals with users accessing maps which contain resources they don't have permissions to.  It's a fairly large can of worms...
>
> Unfortunately, I don't have any resources (development time, money) to throw at a problem this size, and I don't feel comfortable writing an RFC without being able to follow through on it.
>
> Jason
>
> -----Original Message-----
> From: Zac Spitzer
> Sent: Tuesday, May 19, 2009 10:37 PM
> To: MapGuide Users Mail List
> Subject: Re: [mapguide-users] Allow access to different layers based on login
>
> we kinda need a login interface with the viewers,that way if anon
> access is allowed
> it should be the default, then allowing the users to login if they want/need to
>
> the whole anonymous login stuff is rather annoying
>
> time for an RFC maybe?
> _______________________________________________
> mapguide-users mailing list
> mapguide-users at lists.osgeo.org
> http://lists.osgeo.org/mailman/listinfo/mapguide-users
>



-- 
Zac Spitzer -
http://zacster.blogspot.com
+61 405 847 168