From b4bc608bd420aed761610b5e5ed95a93053e8f22 Mon Sep 17 00:00:00 2001 From: Wolfgang Kaltz Date: Wed, 18 Dec 2024 08:59:53 +0100 Subject: [PATCH] Documentation: add information about QGIS protected attributes (#11593) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * Add some information about QGIS protected attributes * Update doc/integrator/backend_qgis.rst Co-authored-by: Stéphane Brunner --------- Co-authored-by: Stéphane Brunner --- doc/integrator/backend_qgis.rst | 47 ++++++++++++------ .../geoportal/.CONST_vars.yaml.swp | Bin 0 -> 16384 bytes .../geoportal/CONST_vars.yaml | 2 +- 3 files changed, 32 insertions(+), 17 deletions(-) create mode 100644 geoportal/c2cgeoportal_geoportal/scaffolds/update/{{cookiecutter.project}}/geoportal/.CONST_vars.yaml.swp diff --git a/doc/integrator/backend_qgis.rst b/doc/integrator/backend_qgis.rst index e950dd8276..03073162a9 100644 --- a/doc/integrator/backend_qgis.rst +++ b/doc/integrator/backend_qgis.rst @@ -169,22 +169,6 @@ and the configuration should be as follows: * WFS support: recommended to be ``[X]`` * Is single tile: recommended to be ``[ ]`` -Access Restriction -****************** - -The access restriction is available only for Docker projects. - -We provide a Docker image named ``camptocamp/geomapfish-qgisserver`` with tag pattern: -``gmf``. - -The configuration that use the ``QGIS_PROJECT_FILE`` or ``GEOMAPFISH_ACCESSCONTROL_CONFIG`` are still -working but are deprecated. Project in Database ******************* @@ -214,6 +198,37 @@ in the vars file add: With that you will not have URL encoding issues. + +Access Restrictions +=================== + +The access restriction functionality described here is available only for Docker projects. + +We provide a Docker image named ``camptocamp/geomapfish-qgisserver`` with tag pattern: +``gmf[-gdal]``. + + +Access Restriction on QGIS OGC server +************************************* + +From version 2.7 the config is just made with the ``GEOMAPFISH_ACCESSCONTROL_BASE_URL`` environment +variable which contains the base URL of the OGC servers, by default it's set to +``QGISSERVER_URL``. And the plugin will search for the OGC servers that match with this base URL. +It also requires that the OGC servers are configured with an URL like that +``config://qgisserver?map=``. + +The configuration that use the ``QGIS_PROJECT_FILE`` or ``GEOMAPFISH_ACCESSCONTROL_CONFIG`` are still +working but are deprecated. + + +Protecting Attributes +********************* + +Individual attributes can be protected via the layer metadata setting ``protectedAttributes``. To define which roles shall +have access, the functionality ``allowed_attributes`` must be used in combination with this setting. As WMS layer name, +the actual (exposed) WMS layer name must be used in this configuration. + + Landing page ============ diff --git a/geoportal/c2cgeoportal_geoportal/scaffolds/update/{{cookiecutter.project}}/geoportal/.CONST_vars.yaml.swp b/geoportal/c2cgeoportal_geoportal/scaffolds/update/{{cookiecutter.project}}/geoportal/.CONST_vars.yaml.swp new file mode 100644 index 0000000000000000000000000000000000000000..fcc8865889ac4b6388664f190c93b2a15a2bd0a6 GIT binary patch literal 16384 zcmeI3TWlj&8OLXP0ov^@rTYN1fQBrPUD%9sPu3^`Z{poVIC0j_W?5EcbUZ$`CmGMo z&N)u(jZz9lJfQXgm7Bz+4}c1&;_?I)AT6LGB#>69AOr%ms1Km>K+B~IbQk!aGspJC zj?<*wmsT^;FSh6VzH|A`^*bIH2AAjN^+{t`!*!>oHGXTBH})s@z47oqZGDwE{Gt%- ze60toBO^PjNa=lHf(aH_i8A$kFW|&USi@HPL;GFyw%NYTEK(|YPLU;QevxpR*x0Z< zZ`Gz&jdL0pe&DT8i*Ig5a+uC8+1gBI^@@toT>XODuZS|*Oc5>^51vJpYO1rR|Rg`|3}FS%KlP^{NGCM zDS6+`;hU!Yzm)ufl7FH@epShfN`BKVTkW6g$iLJf|EH4Quk3%?A^%55`m?ugP5yWG4@k{K1*aNW#Vh_X~h&>Q{Aof7)f!G7F2VxJz9@y3c1Oe^qAxVgM8Q=dm z<71lzZ}%Gr@=44k3kWPgM;A80ZscZ z_%b*SZUw)-L({$lHo!$t0_Q;*8~}HKzwXzxUx8nOAA!d}4V(sV2e*J{Zr8M*fG5D? z;H%(K@Okh_@L^B}%it79g13P~;M#4P_7u1begGZ;4}cGX32+qL1)hHm>IR+!m%yXo zGvL$UW8i(@9&q*5n)WmB6<~u3$b*w$4BQ5ueU+yD27Dhp3|2rMOn`g9b;S5j01@jy z3``)-1qQ((@HEa4eh9t}9s)kdfxE#z@MoN1d=q>YTmSjwFktl)iyCYrTosnxHjd{) zFky_293Pt;Xh9)M5A}xifWifn)Ow3%(fv3MiJy<4gs!m|x zEhjEl(+PS5sX1JG4PM98*Q2;C z4XIxum~uVWz`vdrc9oPVOGH#*8dk_G*$$QzO{P`AluX@XQs3B=pD}{)^q)_ciBrSO zS|Sb$R}JZI-*eRj=4waA@6fYDGGYMS!04g7%Od&>hbr zPM&)K%BxCX3ANVx;o!-`nxDtahHjx0le#@L>0)k1*2*YU%S2M^sWdI0Wo(JJByhS$ zg9hV)E$ZZ8Ra8<@CDEgnNc4`2mM9YxKBC38lr$pPrl!(SvNRFB3+*DPyI91ja$1pc zJbBrg4U4o;+v0pRKo;^z9o<&-dX>yT=dEzlpj@dsgiAR#4Xe#92bw(~xTmD(9xf?3 z6dk62BfFShn42;2IoV*cAW0z`iK^nn~-v9Z<7syEWde%RThpE}ii(JyZpmSZE;AW(JhTDs_S-W40GPSot(jCgzrl=NrZ&IHe9}O4L!>Ev6Bn_r}C0(iMvRj9v zt`=Zw>JMnqX30ciBbT0;%bT;={L*GpeOS!qmNuJ`nG?#X9GgKHqT?r}u_&(UZ^FZe zbu~lum6@JR z&!02%nbdOHoKL;q%r2*MCo|czszko$IVQ6&N~h*K4HmQ6jG3SNKyxc5wF7E3EN2IU zTzdN4bf#$|edT+Mm(f!$IKp3xr_SWlIrwVv)M6^1Kby_XY`zyCga^Z-hBEk2eH1n` zsio8ju`PTLV~+5{6mI78nfdHYT1_69g_4{qCo!=&mzp)UPJcJ@*QWE_woFGh6#DFzhi?rJDLtZSX9*bd*MMpSZIGvc` z>LfZInniTGl$l>jEzM2Ku7ETf5M;gj0HzrK-vJMR6_5t+1P8&hh}$oNZ-Z}vI&eV- zyan70t{`r|3?2uMfRBLl;N9SEa2>Jv@4zMSDIntbkAhhs;`S#Ilivr1!4<^a4}uhU z2J!XhKo*F)T@&?-uh;{z2VxJz9*8|4JRoA6);6FSs~bhiR=MXJA{>zMy&=NvybQdS zyjetAIqExz?!}QHJAbc%C;|ORL6^ z29t+T&151c7APblYaB}SNVF=;aszAJmEeo7@b*c)wEC*J=LS}|JH;1Y;~r_4mX} z$gn+cCJ{CTM>aN(8i?;{aO5baW&KE>_+F^*nBLc*OuP*B9c}jw=`I}EI1YM)7Z?s* zYkj?dBR=8Gh*X>(Y@>lz!O=;TvhB>}uZhtyd&tBITn|x4OK;7X;rs|++#q#_x@8`o zZwPl(D8X48GiVT?K4CA#8pHz}W2kc+)5Reo>egzQUD)){B^HjS<(e1Gpi8-3+PxL% w1?+anXO{&F2l^h}w3AU+k(BZ-%Y)Tc9A59SKs#D>m8hw`>mrHXyK}q!A7Z04-T(jq literal 0 HcmV?d00001 diff --git a/geoportal/c2cgeoportal_geoportal/scaffolds/update/{{cookiecutter.project}}/geoportal/CONST_vars.yaml b/geoportal/c2cgeoportal_geoportal/scaffolds/update/{{cookiecutter.project}}/geoportal/CONST_vars.yaml index 412393c7ae..e34d671c56 100644 --- a/geoportal/c2cgeoportal_geoportal/scaffolds/update/{{cookiecutter.project}}/geoportal/CONST_vars.yaml +++ b/geoportal/c2cgeoportal_geoportal/scaffolds/update/{{cookiecutter.project}}/geoportal/CONST_vars.yaml @@ -778,7 +778,7 @@ vars: - name: protectedAttributes type: list description: > - For QGIS server: List of attribute names that's protected, to be used with the `allowed_attributes` functionality. + For QGIS server: List of attribute names that are protected, to be used with the `allowed_attributes` functionality. relevant_for: - layer_wms # WMTS layers