Mercurial > gemma
view .hgignore @ 4616:b605e91f08f0 geoserver_sql_views
Use GeoServer's SQL view feature instead of in-database VIEWs
VIEWs are executed with the rigths of their owner, but we need to
access the data with the rights of the current_user in order to
have row level security policies applied correctly. Moving the
former VIEW definitions into GeoServer SQL views achieves this, as
the latter are executed as subqueries in usual statements.
Note that a fresh GeoServer setup is required to make this work,
which can be achieved e.g. by starting gemma with the
geoserver-clean flag. Otherwise, GeoServer will keep trying to
access the dropped VIEWs.
author | Tom Gottfried <tom@intevation.de> |
---|---|
date | Tue, 10 Sep 2019 19:56:43 +0200 |
parents | e53ff5bcc020 |
children | 1ab8a5bbce02 |
line wrap: on
line source
syntax: glob # Created by https://www.gitignore.io/api/go,vim,node,visualstudiocode ### Go ### # Binaries for programs and plugins *.exe *.exe~ *.dll *.so *.dylib # Test binary, build with `go test -c` *.test # Output of the go coverage tool, specifically when used with LiteIDE *.out ### Node ### # Logs logs *.log npm-debug.log* yarn-debug.log* yarn-error.log* # Runtime data pids *.pid *.seed *.pid.lock # Directory for instrumented libs generated by jscoverage/JSCover lib-cov # Coverage directory used by tools like istanbul coverage # nyc test coverage .nyc_output # Grunt intermediate storage (http://gruntjs.com/creating-plugins#storing-task-files) .grunt # Bower dependency directory (https://bower.io/) bower_components # node-waf configuration .lock-wscript # Compiled binary addons (http://nodejs.org/api/addons.html) build/Release # Dependency directories node_modules/ jspm_packages/ # Typescript v1 declaration files typings/ # Optional npm cache directory .npm # Optional eslint cache .eslintcache # Optional REPL history .node_repl_history # Output of 'npm pack' *.tgz # Yarn Integrity file .yarn-integrity # local dotenv environment variables file .env.local ### Vim ### # swap .sw[a-p] .*.sw[a-p] # session Session.vim # temporary .netrwhist # auto-generated tag files tags ### VisualStudioCode ### .vscode/* !.vscode/settings.json !.vscode/tasks.json !.vscode/launch.json !.vscode/extensions.json .history .buildbase session.data gemma cmd/tokenserver/tokenserver web gemma.toml CHROME* # End of https://www.gitignore.io/api/go,vim,node,emacs,visualstudiocode TAGS # Import data schema/geonames-import/data/* translations.json pub-config.json