Autodesk 15606-011408-9008 - MAPGUIDE R6.3 NAMED-100U PK, Руководство пользователя

Страница: 81 / 204

Managing Server Security
|
81
Access Keys Versus User IDs and Passwords
Access keys are passwords that the author of a map embeds in the definition
of the map layer. Each time the map layer requests map data, Autodesk
MapGuide Server verifies the embedded access key against the list of valid
access keys for the resource before fulfilling the request. Because this process
takes place automatically and invisibly every time the map layer requests
data, access keys are a convenient way to provide greater resource security
with no impact on the user. Additionally, access keys can be preset to be valid
for only a certain period of time, adding an additional level of control.
User passwords require the user to enter a valid user name and password at
the first request of map data from Autodesk MapGuide Server. Like the
typical Web server security model, the user name and password are required
only once for each layer that uses the restricted resource, providing a high
level of security without unnecessary impact on the user.
Together, access keys and user passwords provide a great deal of flexibility
in solving security problems over a variety of Internet/intranet implementa-
tions.
The following table provides a summary of the differences between the two
security methods:
Users/Groups/Passwords Access Keys
Time Period Active until deleted. Preset time periods.
End-User
Interaction
User must enter correct name
and password. No end-user interaction.
Implementa-
tion Use Autodesk MapGuide Server
Admin to enter and maintain
users, groups, and passwords. Use Autodesk MapGuide
Author to enter access keys in
MWFs; use Autodesk
MapGuide Server Admin to
link access keys to resources
at the server level.
Authorization
Frequency Checked once per resource per
layer request (until the user
exits the current browser
session). Checked by Autodesk
MapGuide Server for every
layer request.