You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
<p>The <code>Data</code> and subordinate <code>Attribute</code> resources control whether access to a dataset is permitted via the <ahref="https://github.com/qwc-services/qwc-data-service">qwc-data-service</a>. <code>Data</code> resources are not permitted by default. They are used for controlling the dataset accessible for <ahref="../../topics/Editing/">Editing</a> and by the <ahref="../../topics/FeatureInfo/#feature-form">FeatureForm</a>.</p>
302
308
<p>For more detailed <ahref="https://en.wikipedia.org/wiki/Create,_read,_update_and_delete">CRUD</a> permissions <code>Data (create)</code>, <code>Data (update)</code> and <code>Date (delete)</code> can be used instead of <code>Data</code>. A <code>Data</code> permission with <code>write=true</code> permits all CRUD operations.</p>
<p>The <code>Viewer task</code> resource defines viewer functionalities (e.g. <code>Print</code> or <code>MapExport</code>) that can be restricted or permitted.</p>
310
+
<p>The <code>Viewer task</code> resource defines viewer functionalities (e.g. <code>Print</code> or <code>MapExport</code>) which can be restricted.</p>
305
311
<p>The resource name will be matched against:</p>
306
312
<ul>
307
313
<li>The <code>key</code> in <code>menuItems</code> and <code>toolbarItems</code> in the QWC <code>config.json</code>.</li>
<p><em>Note</em>: You can restrict tasks entires which specify a mode (i.e. <code>{"key": "Measure", "mode": "LineString"}</code>) by concatenating the task key and the mode as the <code>viewer_task</code> resource name, i.e. <code>MeasureLineString</code>.</p>
312
318
<p>Restricted viewer task items are then removed from the menu and toolbar in the map viewer.</p>
<p>The <code>Viewer asset</code> resource defines viewer assets (i.e. files below the QWC assets folder) which can be restricted.</p>
321
+
<p>The resource name is a file path below the assets folder (i.e. <code>pdfs/mydocument.pdf</code> for <code><baseurl>/assets/pdfs/mydocument.pdf</code>).</p>
322
+
<p>Accessing a viewer asset which is not permitted will result in a <code>404 Not Found</code> error.</p>
<p>WFS and OGC API Features (OAPIF) services are disabled by default and need to be explicitly permitted to be exposed by the <code>qwc-ogc-service</code>. The services also need to be published in in <code>QGIS → Project Properties → QGIS Server → WFS/OAPIF</code>.</p>
315
325
<p>The <code>WFS Service</code> resource permissions control whether a WFS service is exposed by the <code>qwc-ogc-service</code>. If a <code>WFS Service</code> is permitted, all its (published) child layers are permitted by default, without write permissions.</p>
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?v=4&size=40){kind=avatar}
0 commit comments