WFS Stored Queries Obligations

In security.manager, the following restrictions for stored queries can be applied:

  • Deny ad-hoc queries, so that only stored queries are accepted.

  • Individually permit existing stored queries.

Please note that access to the stored query GetFeatureById will always be permitted, since this is mandatory for WFS.

Creating the obligation

  1. Select Obligations → New → Stored Query Restriction → Create an Obligation.

  2. Specify a Name for the obligation.

  3. To deny the use of ad-hoc queries, select Disallow custom queries.

  4. To restrict access to a subset of available stored queries, select Restrict the usage of Stored Queries to the following, and then check those stored queries that shall be permitted.

  5. Check in the summary at the bottom of the window, whether the settings lead to the desired effect.

  6. Click on Save obligation.