Autodesk 15606-011408-9008 - MAPGUIDE R6.3 NAMED-100U PK, User Manual

Page: 82 / 204

82
|
Chapter 4 Assembling and Administering Your Server
Choosing the Best Security Method
The following table offers recommendations about when each security
method is most appropriate:
To implement any or all of these techniques for controlling access to the map
data resources at your site, you use Autodesk MapGuide Server Admin.
Goal Method
Provide MWF files for a certain
group of users only Use the security protection in your HTTP server to
provide the MWF files to only a defined user
group.
Allow user of Autodesk
MapGuide Author to change
styles but not map content Use access keys. You may want to allow a specific
group of map authors to change styles and display
ranges without being able to create new layers or
add layer files. In this case, you can protect your
resources with access keys. When you save a layer
to a Map Layer File (MLF), do not select the
Include Access Key In Map Layer File option. If
users want to add that layer to a map or create a
new layer, they must enter the correct access key
for the resource, or Autodesk MapGuide Server
will not respond to a request for that resource.
Limit access to confidential
data to a specific list of users Assign users to a group, and assign that group to
the confidential resources, changing the pass-
words regularly.
Provide secure access that can
be disabled for a casual and
changing group of users Assign access keys to the resources. Access key
security is transaction-based (every request
requires authentication) and requires no client-side
action. This makes it easier to allow distribution to
casual or public user groups without requiring
them to know and enter the name/password for
every layer in a published map.
Allow users to create maps and
to query Autodesk MapGuide
Server for a list of the resources
that are available to facilitate the
setup of map layers Add users to the group called Authors. All mem-
bers of this group will have map authoring privi-
leges and full access to map data resources.