Autodesk 15606-011408-9320 User Guide - Page 77

Choosing the Best Security Method, Users/Groups/Passwords, Access Keys, Time Period, End-User

Page 77 highlights

The following table provides a summary of the differences between the two security methods. Time Period End-User Interaction Implementation Authorization Frequency Users/Groups/Passwords Access Keys Active until deleted. Preset time periods. User must enter correct name and password. No end-user interaction. Use Autodesk MapGuide Server Admin to enter and maintain users, groups, and passwords. Use Autodesk MapGuide Author to enter access keys in MWFs; use Autodesk MapGuide Server Admin to link access keys to resources at the server level. Checked once per resource per layer request (until the user exits the current browser session). Checked by Autodesk MapGuide Server for every layer request. Choosing the Best Security Method The following table offers recommendations about when each security method is most appropriate. Goal Provide MWF files for a certain group of users only. Allow user of Autodesk MapGuide Author to change styles but not map content. Method Use the security protection in your HTTP server to provide the MWF files to only a defined user group. Use access keys. You may want to allow a specific group of map authors to change styles and display ranges without being able to create new layers or add layer files. In this case, you can protect your resources with access keys. When you save a layer to an MLF (Map Layer File), do not select the Include Access Key In Map Layer File option. If users want to add that layer to a map or create a new layer, they must enter the correct access key for the resource, or Autodesk MapGuide Server will not respond to a request for that resource. Managing Server Security | 77

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190

Managing Server Security
|
77
The following table provides a summary of the differences between the two
security methods.
Choosing the Best Security Method
The following table offers recommendations about when each security
method is most appropriate.
Users/Groups/Passwords
Access Keys
Time Period
Active until deleted.
Preset time periods.
End-User
Interaction
User must enter correct name
and password.
No end-user interaction.
Implementa-
tion
Use Autodesk MapGuide Server
Admin to enter and maintain
users, groups, and passwords.
Use Autodesk MapGuide
Author to enter access keys in
MWFs; use Autodesk
MapGuide Server Admin to
link access keys to resources
at the server level.
Authorization
Frequency
Checked once per resource per
layer request (until the user
exits the current browser
session).
Checked by Autodesk
MapGuide Server for every
layer request.
Goal
Method
Provide MWF files for a certain
group of users only.
Use the security protection in your HTTP server to
provide the MWF files to only a defined user
group.
Allow user of Autodesk
MapGuide Author to change
styles but not map content.
Use access keys. You may want to allow a specific
group of map authors to change styles and display
ranges without being able to create new layers or
add layer files. In this case, you can protect your
resources with access keys. When you save a layer
to an MLF (Map Layer File), do not select the
Include Access Key In Map Layer File option. If
users want to add that layer to a map or create a
new layer, they must enter the correct access key
for the resource, or Autodesk MapGuide Server will
not respond to a request for that resource.