iPortal supports sharing services. The service sharing
scopes include: private, public search/view, designated search/view. When
registering a service,
you can set sharing scope. For services that have been added to iPortal,
you can also set sharing scope in "Resource Center > Service >
My Services" after logging in. Once set sharing, the designated users
can access it from "Resource Center > Service > Public / Shared
with Me / My Organization / My Groups", then use the service in iPortal
built-in WebApps or customized WebGIS system, please see: Use
services.
Service sharing scope
- Private: The default sharing scope is private.
Only the creator and the administrator who has resource management
rights are allowed to view/edit/delete the service, view/edit the
details of the service and change the sharing settings.
- Public Search: All users (including anonymous
users) can search and view resource details, but cannot view the resource.
The shared user needs to apply
for resource authorization for view permission.
- When sharing public search permission, you
can also share the view permission with designated departments/groups/users.
- Public View: Allows all users (including anonymous
users) to view the full spatial extent service.
- Designated: the designated object can be a
department, a group, or a user.
- When choosing "Designated search/view",
the designated department/group/user can search/view the shared service
in "Resource Center > Service > Public / Shared with me
/ My Organization / My Group".
- The designated department option requires that
the administrator has enabled the organizational
structure (disabled by default) and turned on sharing to department
configuration in the iportal.xml
configuration file (turned off by default).
- The designated group option requires that you
have joined at least one group (either as a group creator or a group
member) and have permission to contribute resources. That means only
groups to which you have permission to contribute resources will be
listed. For more information about creating, joining and using groups,
please see: Use group.
Meanwhile, the administrator needs to turn on the Share to Group configuration
in the iportal.xml
configuration file (turned on by default).
- The designated user option requires that the
administrator turns on the Share to User configuration in the iportal.xml
configuration file (turned on by default). The administrator can also
configure in the iportal.xml
configuration file whether to list all users when sharing to designated
users. If the number of users is large, the administrator can also
set the search mode to fuzzy match in the iportal.xml
configuration file to improve the efficiency of the search.
- For services, you can
limit accessible spatial extent granularly to a designated department/group/user.
Note 1: iPortal
provides the service proxy function, which means that when the service
proxy is enabled (the
built-in service proxy is enabled by default, you can also choose
to deploy
the service proxy independently), iPortal will not expose the original
address of the service to the sharer, but show the proxied service address.
Therefore, for security reasons, it is recommended that you turn on the
service proxy function.
Note 2: If
the administrator has enabled the service
review function, the services to be shared must be reviewed before
the sharing settings take effect. You can check the review status on the
My Services page by the resource thumbnails. For services that are pending
review, the thumbnail will show "Pending administrator review",
while for service that has not passed the review, it will show "Review
Rejected".
Limiting
the accessible spatial extent of service
When setting a "designated view" sharing
scope for a service resource, iPortal supports limit the accessible spatial
extent at a finer level of granularity. For example, the designated department/group/user
can only access the features or map tiles contained within the restricted
spatial extent. iPortal supports the following ways to limit the spatial
extent:
- Select administrative division: iPortal provides
the spatial extent corresponding to the provincial administrative
division level within China by default, which you can select directly
from the drop-down list.
- Upload Vector File: Limit the accessible spatial
extent by uploading a Shapefile or GeoJSON file.
- Draw Polygon: Limit the accessible spatial
extent by drawing polygons on the map.
When a user and his department/group are both limited
accessible spatial extents which are different, the accessible extent
to the user is the concatenation of the multiple spatial extents. For
example, a user is limited a spatial extent of Beijing, the department
he works in is limited a spatial extent of Tianjin, and the group he joined
is limited a spatial extent of Hebei, then a user can access services
within the three spatial extents of Beijing, Tianjin, and Hebei.
Note 1: The
service types that currently support limiting spatial extent are SuperMap
iServer REST Map Service, REST Vector Tile Service, REST Data Service,
OGC WMS Service, WMTS Service, Imaging Service and Map Service.
Note 2: Currently
supports the EPSG Code: 4326 coordinate system.
Note 3: If
the base map cannot be displayed when setting the spatial extent, the
administrator needs to configure the base map.
Sharing steps
- After logging in, click on "Resource
Center" > "Service" in the top navigation bar to
access the service resources page, and then click "My Services"
in the secondary navigation bar to access the My Services page.
- In list view mode, click on the icon
in the action bar of the specific service resource. In grid view mode,
click on "..." in the bottom right corner of the card and
select "Share" to enter the sharing settings page.
- If the resource is private now, click on
the "Sharing" button and select the sharing scope "Public
Search", "Public View" , or "Designated".
- If the resource is shared now, you can
change the sharing scope directly; or click the "Share"
switch to turn off the sharing status of the resource. Click the "Save"
button to take effect.
- If you set the sharing scope to "Public
Search", click the "Save" button directly to take effect.
You can also assign the view permission with designated objects when
sharing the public search. Click "Add department / Add group
/ Add user" to add the objects to be shared. Once added, the
page will list the shared objects that have been added. You can delete
a single shared object or select multiple shared objects to delete
in batch. Click the "Save" button to take effect.
- If you set the sharing scope to "Public
View", click the "Save" button directly to take effect.
- If you set the sharing scope to "Designated",
you need to click "Add department / Add group / Add user"
to add the objects and set search/view permissions. Once added, the
page will list the shared objects that have been added. It supports
modifying the spatial extent of a shared object and deletion of a
shared object one by one or in a batch. Click the "Save"
button to take effect.