Autodesk 15606-011408-9330 User Guide - Page 82

Choosing the Best Security Method The following table offers recommendations about when each security method is most appropriate: Goal Method Provide MWF files for a certain group of users only Use the security protection in your HTTP server to provide the MWF files to only a defined user group. Allow user of Autodesk MapGuide Author to change styles but not map content Use access keys. You may want to allow a specific group of map authors to change styles and display ranges without being able to create new layers or add layer files. In this case, you can protect your resources with access keys. When you save a layer to a Map Layer File (MLF), do not select the Include Access Key In Map Layer File option. If users want to add that layer to a map or create a new layer, they must enter the correct access key for the resource, or Autodesk MapGuide Server will not respond to a request for that resource. Limit access to confidential data to a specific list of users Assign users to a group, and assign that group to the confidential resources, changing the passwords regularly. Provide secure access that can be disabled for a casual and changing group of users Assign access keys to the resources. Access key security is transaction-based (every request requires authentication) and requires no client-side action. This makes it easier to allow distribution to casual or public user groups without requiring them to know and enter the name/password for every layer in a published map. Allow users to create maps and to query Autodesk MapGuide Server for a list of the resources that are available to facilitate the setup of map layers Add users to the group called Authors. All members of this group will have map authoring privileges and full access to map data resources. To implement any or all of these techniques for controlling access to the map data resources at your site, you use Autodesk MapGuide Server Admin. 82 | Chapter 4 Assembling and Administering Your Server