[mapserver-users] Spatial access restriction based on "secret" in URL, WMS Getcapabilities

[Arne Kepp]

Hi,

I would like to restrict different users to different geographic regions 
based on a secret in the URL they are using to access MapServer.

I intend to use an inner join on a table with secrets / polygons, and 
then use the run-time substitution in MapServer to insert the sanitized 
secret into the Postgis query.

The crux, I think, is that I have to send WMS 1.3.0 GetCapabilities URLs 
to our users. And I don't think I can make the getcapabilties document 
include the (variable) secret in the OnlineResource elements ?

So I am thinking about writing a wrapper that rewrites the 
GetCapabilities document on the fly. My question is, is there a better 
way that I have not thought of?

Kind regards,
Arne
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/mapserver-users/attachments/20150110/3b1ec2b3/attachment.html>