[mapserver-dev] spatial restriction for queries

[Tamas Szekeres]

Martin,

I think you should flash out further information about your objectives
there are a couple of things not obvious for me with this proposal;

1. I'm not sure where are the user identities stored when restricting
their access to regions. It seems like the mapfile would contain
constant restrictions independent from the users. How the users are
assigned to regions?

2. If we are thinking about static mapfiles (different mapfile for
each user) it seems like this problem is running out of the scope of
mapserver. You may pre-define those mapfiles by setting up different
spatial filters for each regions. The upper level application (ie. a
WEB application) would identify the user any refer to different
mapfiles accordingly.

3. It looks like you'd implement to render only a subset of the
features per-layer within a spatial query. How this option is
different as what the QUERYMAP setting with STYLE=selected would
normally provide? (http://mapserver.org/mapfile/querymap.html) the
query maps could be drawn by the cgi mapserver or by using a custom
script (mapscript) within your application.


Best regards,

Tamas





2009/10/2 Martin Kofahl <M.Kofahl at gmx.net>:
> Hello!
> I'm trying to complete enhancement #3116 (spatial oblogation per layer basis). Queries should be limited to the are a user is allowed to access. Because of the number of query functions, I need some help to figure out where the best place for checking access rights is. I'd manage this using msGEOSWithin().
>
> For vector data all query function seem to depend on msLayerWhichShapes. If so, could MapServer 'simply' filter the list of shapes to be queried?
>
> For raster data I'm still looking if there's a single core function where the check could be done.
>
> On the other hand, I could extend the msQuery functions in mapquery.c in order to check the incoming selectshape or - for attribute search etc. - removing some items from the resultset afterwards.
>
> Can you give me some advice? Thanks!
> Martin
> _______________________________________________
> mapserver-dev mailing list
> mapserver-dev at lists.osgeo.org
> http://lists.osgeo.org/mailman/listinfo/mapserver-dev
>