iPortal supports sharing services. The service sharing scopes include: private, public search/view, designated search/view. When registering a service, you can set sharing scope. For services that have been added to iPortal, you can also set sharing scope in "Resource Center > Service > My Services" after logging in. Once set sharing, the designated users can access it from "Resource Center > Service > Public / Shared with Me / My Organization / My Groups", then use the service in iPortal built-in WebApps or customized WebGIS system, please see: Use services.
Service sharing scope
- Private: The default sharing scope is private. Only the creator and the administrator who has resource management rights are allowed to view/edit/delete the service, view/edit the details of the service and change the sharing settings.
- Public Search: All users (including anonymous users) can search and view resource details, but cannot view the resource. The shared user needs to apply for resource authorization for view permission.
- When sharing public search permission, you can also share the view permission with designated departments/groups/users.
- Public View: Allows all users (including anonymous users) to view the full spatial extent service.
- Designated: the designated object can be a department, a group, or a user.
- When choosing "Designated search/view", the designated department/group/user can search/view the shared service in "Resource Center > Service > Public / Shared with me / My Organization / My Group".
- The designated department option requires that the administrator has enabled the organizational structure (disabled by default) and turned on sharing to department configuration in the iportal.xml configuration file (turned off by default).
- The designated group option requires that you have joined at least one group (either as a group creator or a group member) and have permission to contribute resources. That means only groups to which you have permission to contribute resources will be listed. For more information about creating, joining and using groups, please see: Use group. Meanwhile, the administrator needs to turn on the Share to Group configuration in the iportal.xml configuration file (turned on by default).
- The designated user option requires that the administrator turns on the Share to User configuration in the iportal.xml configuration file (turned on by default). The administrator can also configure in the iportal.xml configuration file whether to list all users when sharing to designated users. If the number of users is large, the administrator can also set the search mode to fuzzy match in the iportal.xml configuration file to improve the efficiency of the search.
- For services, you can limit accessible spatial extent granularly to a designated department/group/user.
Note 1: iPortal provides the service proxy function, which means that when the service proxy is enabled (the built-in service proxy is enabled by default, you can also choose to deploy the service proxy independently), iPortal will not expose the original address of the service to the sharer, but show the proxied service address. Therefore, for security reasons, it is recommended that you turn on the service proxy function.
Note 2: If the administrator has enabled the service review function, the services to be shared must be reviewed before the sharing settings take effect. You can check the review status on the My Services page by the resource thumbnails. For services that are pending review, the thumbnail will show "Pending administrator review", while for service that has not passed the review, it will show "Review Rejected".
Limiting the accessible spatial extent of service
When setting a "designated view" sharing scope for a service resource, iPortal supports limit the accessible spatial extent at a finer level of granularity. For example, the designated department/group/user can only access the features or map tiles contained within the restricted spatial extent. iPortal supports the following ways to limit the spatial extent:
- Select administrative division: iPortal provides the spatial extent corresponding to the provincial administrative division level within China by default, which you can select directly from the drop-down list.
- Upload Vector File: Limit the accessible spatial extent by uploading a Shapefile or GeoJSON file.
- Draw Polygon: Limit the accessible spatial extent by drawing polygons on the map.
When a user and his department/group are both limited accessible spatial extents which are different, the accessible extent to the user is the concatenation of the multiple spatial extents. For example, a user is limited a spatial extent of Beijing, the department he works in is limited a spatial extent of Tianjin, and the group he joined is limited a spatial extent of Hebei, then a user can access services within the three spatial extents of Beijing, Tianjin, and Hebei.
Note 1: The service types that currently support limiting spatial extent are SuperMap iServer REST Map Service, REST Vector Tile Service, REST Data Service, OGC WMS Service, WMTS Service, Imaging Service and Map Service.
Note 2: If the base map cannot be displayed when setting the spatial extent, the administrator needs to configure the base map.
Sharing steps
- After logging in, click on "Resource Center" > "Service" in the top navigation bar to access the service resources page, and then click "My Services" in the secondary navigation bar to access the My Services page.
- In list view mode, click on the icon in the action bar of the specific service resource. In grid view mode, click on "..." in the bottom right corner of the card and select "Share" to enter the sharing settings page.
- If the resource is private now, click on the "Sharing" button and select the sharing scope "Public Search", "Public View" , or "Designated".
- If the resource is shared now, you can change the sharing scope directly; or click the "Share" switch to turn off the sharing status of the resource. Click the "Save" button to take effect.
- If you set the sharing scope to "Public Search", click the "Save" button directly to take effect. You can also assign the view permission with designated objects when sharing the public search. Click "Add department / Add group / Add user" to add the objects to be shared. Once added, the page will list the shared objects that have been added. You can delete a single shared object or select multiple shared objects to delete in batch. Click the "Save" button to take effect.
- If you set the sharing scope to "Public View", click the "Save" button directly to take effect.
- If you set the sharing scope to "Designated", you need to click "Add department / Add group / Add user" to add the objects and set search/view permissions. Once added, the page will list the shared objects that have been added. It supports modifying the spatial extent of a shared object and deletion of a shared object one by one or in a batch. Click the "Save" button to take effect.