[OpenLayers-Users] Control access to WMS

[Steve.Toutant at inspq.qc.ca]

Thanks all for your help,
I'll have in a near future to implement a fully secured private site since 
I'm gonna have to publish VERY sensible data via WMS. I can tell that this 
issue scares the IT group. Story to follow...
But for now, obscurity is sufficient.

I'm a bit in obscurity myself regardin http_referer...I need to know more 
about the mechanic...
It's not clear what I should do in the mapfile and in my OpenLayers code?

I added Daniel's code in Apache conf.

"Then your WMS requests should refer to the mapfile using "map=MYMAP" 
instead of a full path. If the referrer is not valid, then MYMAP will 
not be set and MapServer will spit out an error."

Do I need to use the MYMAP environment variabble in the mapfile or in OL 
code, or both?

I'm using OpenLayers to create a WMS layer with new 
OpenLayers.Layer.WMS(name, url, params, options);
Instead of the path of the mapfile should I use MYMAP (Environment 
variable MYMAP defined in the conf of Apache). If so, Is there some magic 
there to get the environment variable value? Should I get it with some php 
code?

Thanks
Steve







Daniel Morissette <dmorissette at mapgears.com>@openlayers.org 
Envoyé par : users-bounces at openlayers.org
13/10/2009 02:56 PM

A
users at openlayers.org
cc

Objet
Re: [OpenLayers-Users] Control access to WMS








Christopher Schmidt wrote:
> 
> If you care about people 'stumbling in', this would be sufficient. If 
you
> actually want to ensure people can't use the data outside of your app,
> it's not.
> 
[...]
> 
> Yeah, something like that is what I would probably do if I wanted 
something
> taht was obscurity and not security. :)
> 

I agree (and I never used the word security). But this may be sufficient 
in some simple cases.  :)

And for a more complete Access Control solution, everyone is invited to 
a presentation of the new GeoPrisma project in a conference near you:

FOSS4G 2009 (Sydney, 2009-10-23):
   http://2009.foss4g.org/presentations/#presentation_146

Géomatique 2009 (Montréal, 2009-10-21):
   http://www.geomatique2009.com/en/papers/program

Daniel
-- 
Daniel Morissette
http://www.mapgears.com/
_______________________________________________
Users mailing list
Users at openlayers.org
http://openlayers.org/mailman/listinfo/users



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.osgeo.org/pipermail/openlayers-users/attachments/20091014/8a2e9869/attachment.html