Supported GIS Services and Access Control Functions

security.manager provides general protection for a wide range of services through modular interceptors, management interfaces and policies.

OGC Web Mapping Services / INSPIRE View Service

  • Protected services that are compliant to WMS specifications 1.0, 1.1 and 1.3 (HTTP POST and GET profile).

  • Protection can be provided for entire services, individual layers or functions, or any combination thereof. It is possible to assign a restricted validity period to policies.

  • Spatial authorization allows for the restriction of visibility to certain map sections. This makes it possible to allow one user to visualise a property in community A and to request the associated attribute data, while another user might only be permitted to do so within the territory of community B.

  • User-specific copyright notices can be incorporated into maps, in either text or graphic form.

OGC Web Feature Services / INSPIRE Feature Download Service

  • Protected services that are compliant with WFS specifications 1.0, 1.1 and 2.0 (HTTP POST profile).

  • Protection can be provided for entire services, individual feature types, functions, or any combination thereof. It is possible to assign a restricted validity period to policies.

  • GML and GeoJSON are supported as output formats.

  • Spatial authorization allows for the restriction of visibility to certain map sections.

  • Filter expressions limit access to certain features by attribute-based rules (not supported for WFS 2.0)

OGC Web Feature Services - Transactional

  • Protects services that are compliant with WFS-T specifications 1.0 (HTTP POST and GET profile).

  • Protection can be provided for entire services, individual feature types, functions, or any combination thereof. It is possible to assign a restricted validity period to policies.

  • Spatial authorization is not available for WFS-T.

OGC Web Coverage Services

  • Protects services that are compliant with WCS specifications 1.0, 1.1 or 1.1.1.

  • Protection can be provided for entire services, individual coverages, or functions, or any combination thereof. It is possible to assign a restricted validity period to policies.

  • Spatial authorization is not available for WCS.

Generic URL protection

  • Protection of any online resources (HTTP GET and HTTP POST).

  • Access to any service types or internet pages can be protected.

  • Protection given to a base URL and optional sub-URLs.

  • Possible to use wildcards when defining sub-URLs.