Autodesk 15606-011408-9330 User Guide - Page 81

Access Keys Versus User IDs and Passwords Access keys are passwords that the author of a map embeds in the definition of the map layer. Each time the map layer requests map data, Autodesk MapGuide Server verifies the embedded access key against the list of valid access keys for the resource before fulfilling the request. Because this process takes place automatically and invisibly every time the map layer requests data, access keys are a convenient way to provide greater resource security with no impact on the user. Additionally, access keys can be preset to be valid for only a certain period of time, adding an additional level of control. User passwords require the user to enter a valid user name and password at the first request of map data from Autodesk MapGuide Server. Like the typical Web server security model, the user name and password are required only once for each layer that uses the restricted resource, providing a high level of security without unnecessary impact on the user. Together, access keys and user passwords provide a great deal of flexibility in solving security problems over a variety of Internet/intranet implementations. The following table provides a summary of the differences between the two security methods: Time Period End-User Interaction Implementation Authorization Frequency Users/Groups/Passwords Active until deleted. Access Keys Preset time periods. User must enter correct name and password. No end-user interaction. Use Autodesk MapGuide Server Admin to enter and maintain users, groups, and passwords. Use Autodesk MapGuide Author to enter access keys in MWFs; use Autodesk MapGuide Server Admin to link access keys to resources at the server level. Checked once per resource per layer request (until the user exits the current browser session). Checked by Autodesk MapGuide Server for every layer request. Managing Server Security | 81