Limiting WebDAV Access to the Repository

WebDAV is a protocol to access and modify resources within the Spectrum Spatial repository but it can cause references between named resources and their Access Control List (ACL) to become inconsistent.

Use Spectrum Spatial Manager, the Named Resource service, and the Access Control service instead of WebDAV.

By default, accessing the repository using WebDAV is restricted to the machine where Spectrum Technology Platform is installed. You can provide access to servers by modifying the spatial java property file. You can do this by adding a property that includes a list (that is comma separated) of host names (IPs) that WebDAV is open to.

You must restart the Spectrum Technology Platform server to apply this change.

Note: Limiting repository access using WebDAV applies to new Spectrum Technology Platform installations. The default value of the flag repository.accesscontrol.allows in SpectrumDirectory/server/modules/spatial/spatial.properties is blank.

To limit repository access using WebDAV:

  1. Open a web browser and go to http://server:port/jmx-console
    Where:
    • server is the IP address or host name of your Spectrum Technology Platform server.
    • port is the HTTP port used by Spectrum Technology Platform. The default is 8080.
  2. Log in using the admin account.
  3. Under Domain: com.pb.spectrum.platform.configuration.properties, click com.pb.spectrum.platform.configuration.properties:manager=spatial.properties.
  4. Change the value of repository.accesscontrol.allows.

    Leaving the property empty disables all access to using WebDAV for all servers except the machine where Spectrum Technology Platform is installed.

    To allow other servers WebDAV access, enter a comma-separated list of server IP addresses. For example:

    192.168.2.1,192.168.2.2
  5. Click the Set button next to the repository.accesscontrol.allows.
  6. Restart the Spectrum Technology Platform server.

    For instructions on how to restart the Spectrum Technology Platform server, see the Spectrum Administration Guide.

Once this process is complete, WebDAV access is limited to the repository.