Mapstore Catalog gets blank when Restriction applied in Geoserver (JDBC Method)

[Syed Muntazir]

Hallo dear developers, 

I have integrated the user management System of Mapstore2 with Geoserver 2.26 using the JDBC Method (https://docs.mapstore.geosolutionsgroup.com/en/latest/developer-guide/integrations/geoserver/). I can see that the users, groups and roles are fetched from the Mapstore in the Security Section of the Geoserver and I can also see the users and roles in the Security tab of individual layers and individual Workspaces of the Geoserver.

However, when I grant access to any single role or any user (including ADMIN role in Geoserver), then I do not see any layer in the Catalog of the Mapstore. 

Only when I grant permission to "ROLE_ANONYMOUS" or when I do not select any role as shown in the picture below, then the layers appear again in the Catalog of the Mapstore and I can embed them in my maps. 

In other words, I cannot restrict access of any user to any specific workspace or layers. Currently, all the users of Mapstore have access to all the layers and workspaces present in the Geoserver. The moment I restrict access to any layer, then nobody has access to any layer and the Catalog of Mapstore shows empty for all users. How can I solve this problem?

Kind regards,

Syed

[Lorenzo Natali]

Hi,

this looks like a step is missing in your integration. The user or the role doesn't look to be recognized.

- Make sure that WMS from MapStore to GeoServer include the authkey parameter, if not, configure MapStore to do so.

- Make sure that the authkey is included in the filter chain for "default" entry

- Make sure that the role service of GeoServer is set to geostore.