GeoServer OGC services must be under GeoNode Auth control

[gubuntu]

Please confirm that this is the case and if not, pls organise it gets implemented

'Permission to connect to OGC service endpoints of GIS layers is assigned to groups in the GeoNode interface. Only members of groups with view access to a layer will be able to connect to that layer from an OGC client'

e.g. members of groups with view access to a layer should be able to use WMS (but not WFS or WCS)

members of groups with no access to a layer should not be able to use any OGC service.

members of groups with download access should be able to use WCS and WFS

[NyakudyaA]

@gubuntu This is the default behavior for Geonode. Since users have no direct access to GeoServer they access the service through a client like metasearch which will use the Geonode access token to request layers from GeoServer and give them the correct permissions.

The only major sticking point is that metasearch seems not to be working and has to be fixed

[gubuntu]

@NyakudyaA please create a separate issue for Metasearch (on the QGIS repo if it is a QGIS issue) and comment on the point in the OP here.

The workflow should be for a user to see the layer view in GeoNode, look at the metadata and get the OWS url (which should be the GeoNode proxy url) from the metadata and then add the OWS service to their own GIS.

1. The above workflow should work
2. the correct authentication should apply as per the OP