[mapguide-users] mapguide-rest 1.0 RC3

[Jackie Ng]

The whitelisting feature is so that Mr. Anonymous MapGuide user account
doesn't have unfettered feature/resource service API access to *all*
resources in your site repository.

Runtime map creation does not fall under the feature service or resource
service classification of APIs, so whitelisting doesn't cover it.

As to whether createmap should be guarded. Yes it probably should, even if
you send anonymous credentials to it (if it isn't, it's an oversight on my
part and you should probably file a github issue on it).

- Jackie



--
View this message in context: http://osgeo-org.1560.x6.nabble.com/mapguide-rest-1-0-RC3-tp5239551p5239754.html
Sent from the MapGuide Users mailing list archive at Nabble.com.