[Regression] View only perm does not works on GeoServer as espected b…

…ecause guardian always inserts a * * rule on GeoFence
GeoNode · Oct 26, 2018 · a0c16cd · a0c16cd
1 parent 67c0806
commit a0c16cd
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/geonode/security/utils.py b/geonode/security/utils.py
@@ -418,7 +418,8 @@ def sync_geofence_with_guardian(layer, perms, user=None, group=None):
     """
     # Create new rule-set
     gf_services = {}
-    gf_services["*"] = 'view_resourcebase' in perms or 'change_layer_style' in perms
+    gf_services["*"] = 'download_resourcebase' in perms and \
+        ('view_resourcebase' in perms or 'change_layer_style' in perms)
     gf_services["WMS"] = 'view_resourcebase' in perms or 'change_layer_style' in perms
     gf_services["GWC"] = 'view_resourcebase' in perms or 'change_layer_style' in perms
     gf_services["WFS"] = ('download_resourcebase' in perms or 'change_layer_data' in perms) \