Limitations

This document describes the known limitations of security.manager for OGC.

WMS

Operations

  • The return values of the GetLegendGraphic and GetStyles operation cannot be restricted.

Group layers

  • When using group layers, only sub-layers can be constrained. The capabilities document lists parent layers even if either direct access to them has been restricted or access to all sub-layers has been restricted.

WFS

Feature types

  • Feature types of a WFS must have unique local names because policies in security.manager for OGC must be defined based on the local name. WFS that offer feature types with the same local name in different namespaces are not supported.

Output formats

  • GML and GeoJSON are supported as output formats.

Spatial restrictions

  • Spatial restrictions are not supported for ArcGIS Server based WFS. Reason for this is the lack of support for filters with MultiSurface geometries in ArcGIS.

Stored queries

  • The operations DropStoredQuery and CreateStoredQuery are not supported.

  • Private stored queries are not supported and are filtered from the ListStoredQuery and DescribeStoredQuery responses. The only exception to this is the GetFeatureById predefined stored query.

  • All public stored queries are set to private. The body of these queries is filtered from the DescribeStoredQuery response.

  • Only those stored queries are supported that return feature types matching the feature types listed in the GetCapabilities response. For example, stored queries using gml:AbstractFeature or the schema-element expression are not supported (such as GetDatasetByCrs). They are filtered from the ListStoredQuery and DescribeStoredQuery responses.

  • Only stored queries with a body using the query language urn:ogc:def:queryLanguage:OGC-WFS::WFS_QueryExpression are supported.