Training MS SharePoint Map Security Tool · Server) environment and the configurations have been...

1 | P a g e

Training

MS SharePoint

Map Security Tool

Last Updated: 13 September 2013

2 | P a g e

Contents 1. INTRODUCTION ............................................................................................................................. 3

2. MAP SECURITY COMPONENTS ................................................................................................... 3

2.1. USERS .................................................................................................................................... 3

2.2. GROUPS ................................................................................................................................. 4

2.3. ROLES .................................................................................................................................... 4

2.4. WIDGETS ................................................................................................................................ 4

2.5. THEMES ................................................................................................................................. 4

2.6. MAP SERVICES ..................................................................................................................... 4

2.7. FIELDS .................................................................................................................................... 4

2.8. SEARCH ................................................................................................................................. 5

2.9. REPORT AND CONTEXT REPORT ...................................................................................... 5

3. RELATIONSHIPS ............................................................................................................................ 6

4. CONFIGURATION WORKFLOW .................................................................................................... 9

4.1. SET UP ................................................................................................................................... 9

Step 1 – Set up the Users ................................................................................................................ 9

Step 2 – Set up the Groups ........................................................................................................... 11

Step 3 – Set up the Roles .............................................................................................................. 12

Step 4 – Set up the Widgets .......................................................................................................... 14

Step 5 – Set up the Themes .......................................................................................................... 15

Step 6 – Set up the map services .................................................................................................. 16

Step 7 – Set up the Map Service fields.......................................................................................... 20

Step 8 – Set up the searches ........................................................................................................ 22

Step 9 – Set up the context report fields........................................................................................ 26

Step 10 – Set up the full report fields ............................................................................................. 28

5. CONFIGURING THE RELATIONSHIPS ....................................................................................... 33

5.1 THEMES ............................................................................................................................... 33

5.1.1 MAP SERVICES ............................................................................................................... 33

5.1.2 ROLES .............................................................................................................................. 35

5.2. WIDGETS .............................................................................................................................. 37

5.3. GROUPS ............................................................................................................................... 38

5.4. USERS .................................................................................................................................. 40

3 | P a g e

1. INTRODUCTION Online maps have been available from the City of Johannesburg since 2006 where internal users as

well as developers and the public access property information in the form of searches, queries,

reports, maps and physical extraction of data from the online content.

The ArcIMS Application provides a comprehensive set of functionalities that have been developed

over many years. The application provides for a high level of customization over the front end which is

managed by several database tables on the back end. All configurations or changes to the ArcIMS

application are performed by administrator who has an in-depth knowledge of the system.

The ArcIMS Application has been migrated to an ArcGIS for Server (formerly known as ArcGIS

Server) environment and the configurations have been moved to MS SharePoint.

SharePoint Foundation 2010 incorporates an authentication model that works with any corporate

identity system, including Active Directory Domain Services, LDAP-based directories, application-

specific databases, and user-centric identity models.

The security model for the website will be able to handle:

Automatic security trimming around controls and web parts

Handling of permissions between Internal vs. external users

Configurable Handling of Roles, Groups and GIS-layered Security

o Automatic generation of screens for security management

The SharePoint Map Security tool allows the website administrator to control what map services and

tools are seen per user as well as which searches and reports can be done.

Only the website administrator will have the access rights in order to change the map configuration

settings which are accessed by logging into the Geolis viewer webpage by using the following link

http://geolis.cojdev.joburg.org.za/Pages/default.aspx.

2. MAP SECURITY COMPONENTS When accessing the map security tool the following options will be seen as shown in figure 1.

Figure 1

The following components need to be first set up and then the security settings will be added.

2.1. USERS There are three main types of users which need to be defined.

The first being the Internal website users which are employees and departments within the City of

Johannesburg which includes MOEs (Municipal Owned Entities).

http://geolis.cojdev.joburg.org.za/Pages/default.aspx

4 | P a g e

The second group is the External website users are users from the public that can access the web

site for free to view property related information or the users can use the pay service for exporting

data.

The third group is the Website Administrator user who will be responsible for:

• Manage the web content

• Security

• Map services

• Widgets

• Usage reports

2.2. GROUPS The Groups will determine which themes the users see. Each user can be part of one or more groups.

Each group will have roles assigned to it

2.3. ROLES The roles are groups of widgets and themes which are logically grouped together. The website

administrator will be able to assign the roles to the groups which will determine the functionality of

each theme.

2.4. WIDGETS A widget is an application, or a component of an interface, that enables a user to perform a function or

access a service.

The widgets should be available on the website for the users to analyse property and related

information on the viewer.

2.5. THEMES The Geospatial Viewer will consist of a main map view from which the users will be able to activate

specific Themes. A theme is a group of map services which will be displayed together in one web

map. The website administrator will be responsible for creating and managing the themes and layers.

2.6. MAP SERVICES A map service is an Arcmap Document (.mxd) which is published through ArcGIS server and is

accessible to be viewed in the Silverlight map viewer. The map services will consist of a base map

service that will be cached to optimised speed of the service. Other Departments (Groups) that

require specific information will have a map service with only their specific map information and inherit

from the base map service to provide a complete geographical context.

A map service consists of many layers. Layers can represent feature classes, group layers, image

layers or any combination thereof. A map service may belong to one or more themes.

2.7. FIELDS Each map service consists of many layers. Each layer has one or many fields against which a search

can be made. If the field needs to be searchable an alias can be used and is defined in the fields tab.

An alias is a friendly field name to be displayed to the user.

The administrator also needs to define which fields are visible the user sees when identifying the map

layer in question.

5 | P a g e

2.8. SEARCH The administrator needs to define the searchable layers as well as the fields. These will be the pre-

defined searches which will only allow searches on certain layers and fields.

2.9. REPORT AND CONTEXT REPORT Once a search has been done the list of the results will be seen in a basic or full report. The basic

report is known as a context report and the full report will only display the defined fields. The context

report will have a smaller subset of information contained in the detailed report.

6 | P a g e

3. RELATIONSHIPS The below ERD diagram, shown in figure 2, shows the relationships between the different

components.

Figure 2

Taking a closer look at the relationships, there are a few important relationships which need to be

highlighted.

1. The user and groups have a many to many relationship.

A user may be part of one or more groups and a group can have more than one user. As

seen in figure 3.

Figure 3

7 | P a g e

The implementation of this in the COJ map security tool is that users have groups

2. The Groups and Roles have a many to many relationship.

A group can have more than one role and a role can be part of more than one group. As seen

in figure 4.

Figure 4

3. Roles have a many to many relationship with both the widgets and themes.

A role can have more than one widget and theme. A widget (tools) can have more than one

role and a theme can have more than one role. As seen in figure 5.

Figure 5

4. Themes have a many to many relationship with the Map Services.

A theme can have many map services and a map service can belong to many themes. As

seen in figure 6.

Figure 6

8 | P a g e

5. A Map Service and a layer have a many to many relationship but a Layer and a Field has a

one to many relationship.

A map service has more than one layer and a layer can be in more than one map service. A

layer has more than one field but a field can only be in one map service. As seen in figure 7.

Figure 7

6. A field has one to many relationships with the search, report and context report.

A field may only be used once in a search but there may be more than one field in the search.

The same is true for a report and the context report where a field may only be used once but

many fields may be in the report. As seen in figure 8.

Figure 8

9 | P a g e

4. CONFIGURATION WORKFLOW

4.1. SET UP

Step 1 – Set up the Users Set up the user’s names.

1. Go to the map security tool from the homepage the GeoLIS webmap, shown in figure 9.

Figure 9

2. Go to the users tab as shown in figure 10.

Figure 10

3. Click on New button to add a new user shown in figure 11.

10 | P a g e

Figure 11

4. In order to add a new user into the map security tool, the new user’s name as recorded in

SAP needs to be known as it will search the name field in SAP, as shown in figure 12.

Figure 12

5. To select the number and confirm that the correct information is seen that click save.

11 | P a g e

Figure 13

6. The user will now be added to the list and can be assigned to a group.

Step 2 – Set up the Groups Set up the Group names.

1. To add a group you need to go to the Groups tab as seen in figure 14.

Figure 14

2. Click on New button to add a new group shown in figure 15.

Figure 15

3. Type in the name of the new group and click save, as shown in figure 16.

12 | P a g e

Figure 16

4. A message will come up to say that the group has been successfully added and the new

group will be seen in the list of all the groups, as shown in figure 17 and 18.

Figure 17 Figure 18

Tip: You need to close the window manually after adding a group.

Step 3 – Set up the Roles

Set up the Role names.

1. To add a role you need to go to the Roles tab as seen in figure 19.

Figure 19

2. Click on New button to add a new role shown in figure 20.

13 | P a g e

Figure 20

3. Type in the name of the new role and click save, as shown in figure 21.

Figure 21

4. A message will come up to say that the role has been successfully added and the new role

will be seen in the list of all the role, as shown in figure 22 and 23.

14 | P a g e

Figure 22

Figure 23

Tip: You need to close the window manually after adding a role.

Step 4 – Set up the Widgets Check if all the widgets have been added to the map security tool. There are a few things to

remember when adding or changing a widget to the map security tool.

The widget name must be the same as in the website configuration .xml document in order for

the widget to be added to the security tool and be seen in the map themes.

New tools will only be able to be added if they exist in the website configuration .xml file.

If the name of the widget needs to be changed, it needs to be changed first in the website

configuration .xml file. Then deleted and re-added into the map security tool with the new

name.

Note: When a widget it added to the map security tool, it probably not change name and will

only be needed to be loaded once.

A new widget needs to be added the website’s configuration file before adding the widget into

the map security tool, if it is not done the newly added widget will not be link and will not show

in the map themes.

1. To add a widget you need to go to the widget tab as seen in figure 24.

Figure 24

2. There will be a list of all the widget which has already been added to the map security tool as

seen figure 25.

15 | P a g e

Figure 25

3. If you need to add a new widget you click the New button and type in the widget’s name as

shown in figure 26.

Figure 26

Step 5 – Set up the Themes

Set up the Theme names

There are few things to remember when adding themes.

When adding a theme to the map security tool, the new theme will not be automatically be

listed under the Themes section on the left hand side of the viewer.

The website administrator will need to be manually programmed onto the webpage.

1. To add a theme you will need to go to the Themes tab as seen in figure 27.

Figure 27

16 | P a g e

2. Click the New button to add the new Theme, then click save as seen in figure 28.

Figure 28

Step 6 – Set up the map services

Add the map services to the map security tool.

1. Open the Map Services tab as seen in figure 29.

Figure 29

2. Before adding a map service to the map security tool you first go to the rest service. The rest

service is accessed through the following URL: http://zajw03isags01.joburg.org.za/arcgis/rest.

You now need to copy the new map service’s rest URL as shown in figure 30.

http://zajw03isags01.joburg.org.za/arcgis/rest

17 | P a g e

Figure 30

3. Go back to the map service tab in the map security tool and click the new button as seen in

figure 31.

Figure 31

4. Paste the copied map service rest URL into the textbox called Service URL as seen in figure

32. Then click Process.

18 | P a g e

Figure 32

5. When the Process has been clicked, the properties of the map service will be shown as seen

in figure 33.

Figure 33

6. The names seen in the layers box are the layer names which were created in the mxd. The

map security tool pulls through the layer names and field aliasing which was done in ArcMap.

You can examine the field’s aliasing by clicking on the layer and selecting a field from the

field’s box as seen in figure 34.

19 | P a g e

Figure 34

7. Click save to add the map service, the saved map service will be seen in the list as shown in

figure 35.

Tip: You need to close the window manually after adding a map service.

Figure 35

20 | P a g e

Step 7 – Set up the Map Service fields Set up the map service fields for which fields will be identifiable and the field aliasing.

1. Open the Fields tab as seen in figure 36.

Figure 36

2. You need to select a map service from the drop down list as shown in Figure 37.

Figure 37

3. You will need to select a layer from the drop down list as shown in figure 38.

Figure 38

4. Select a layer and its fields will be seen in the list as shown in figure 39.

21 | P a g e

Figure 39

5. Select a field so you can check the alias name and make the field seen when identified as

shown in figure 40.

Figure 40

6. You need to click update in order to change the field, as seen in figure 41.

Figure 41

22 | P a g e

7. Change the alias and check the identifiable checkbox, as seen in figure 42.

Figure 42

8. You need to save each field you edit before continuing with the next field, otherwise only the

last edited field will be saved.

To save the field settings, you need to click the OK button as seen in figure 43.

Figure 43

9. When selecting the next field you want to change, you need to click update again.

10. When you are selecting the field Aliasing and the identifiable fields take into account the

following:

The fields which have been selected as identifiable will show the alias name when

identified on the map.

When the identifiable checkbox is ticked those fields will be seen when the layer is

identified as well as the in the Spatial Analysis tool and the Spatial Query tool.

Step 8 – Set up the searches Set up the fields which will be used for searching in the attribute search widget.

1. Open the Searches tab as seen in figure 44.

Figure 44

2. Select the map service (from which the attribute search will be based off) from the dropdown

list as seen in figure 45.

23 | P a g e

Figure 45

3. Select the layer from the dropdown list as seen in figure 46.

Figure 46

4. Once the map service and layer has been selected, a message will show if there is no current

search on that layer as shown in figure 47.

24 | P a g e

Figure 47

5. If there is no search found, click new button to start creating a new search as seen in figure

48.

Figure 48

6. Give the search a proper name. This will be the name seen in the Attribute Search tool which

is in the webmap as seen in figure 49 and 50

25 | P a g e

Figure 49

Figure 50

7. Highlight the fields that you want to search on then click add as seen in figure 52, then click

save.

Figure 52

Tip: You need to close the window manually after adding a search.

8. Once a search has been created for the layer, the searches properties will be seen as shown

in figure 53.

26 | P a g e

Figure 53

Note: It is not recommended to have too many fields listed to be searched on. If you want to see more

fields rather make them available in the context or full report.

Step 9 – Set up the context report fields The context reports are the small report tables which are seen before a full report is printed. This is to

determine which fields will be seen.

1. Open the Context tab as seen in figure 54.

Figure 54

2. Select the map service (from which the context report will be based off) from the dropdown list

as seen in figure 55.

Figure 55

27 | P a g e


Figure 56


context report on that layer as shown in figure 57.

Figure 57

5. Click the new button to create a report as seen in figure 58.

Figure 58

6. Give the context report a proper name.

Highlight the fields that you want to see in the context report then click add as seen in figure

59, then click save.

28 | P a g e

Figure 59

Tip: You need to close the window manually after adding a context report.

7. Once a context report has been created for the layer, the searches properties will be seen as

shown in figure 60.

Figure 60

Step 10 – Set up the full report fields The full report is accessed from the context report and can contain a locality map. This is to determine

which fields will be seen.

1. Open the Report tab as seen in figure 61.

29 | P a g e

Figure 61

2. Select the map service (from which the report will be based off) from the dropdown list as

seen in figure 62.

Figure 62


Figure 63

30 | P a g e


report on that layer as shown in figure 64.

Figure 64

5. Click the new button to create a report as seen in figure 65.

Figure 65

6. Give the context report a proper name and title. The title will be seen in the report output as

shown in figure 66 and 67.

31 | P a g e

Figure 66

Figure 67

7. Check the Locality Map tickbox if you want to have a locality map in the full report.

8. Type in a disclaimer if needed, as shown in figure 68. The disclaimer will be seen at the

bottom of the report.

Figure 68

32 | P a g e

9. Highlight the fields that you want to see in the report then click add as seen in figure 69, then

click save.

Figure 69

Tip: You need to close the window manually after adding a context report.

10. Once a context report has been created for the layer, the searches properties will be seen as

shown in figure 70.

Figure 70

Note:

You need to have a Search, Context Report and Report set up for a layer in order for it to be seen in

the webmap. If one is missing, there will not be an attribute search set up for that layer.

33 | P a g e

5. CONFIGURING THE RELATIONSHIPS In the above set up with the map services, field aliasing, layer’s identifiable fields, searches, context

report and reports, we now need to set up which map service will belong to which theme.

5.1 THEMES The following themes have been identifies:

General

Innercity

Map3

Planning

Property

Tourism

Transportation

Zoning

5.1.1 MAP SERVICES The following map services are assigned to each theme.

General Innercity Map3 Planning Property Tourism Transportation Zoning AerialPhotography AerialPhotography BaseMap AerialPhotography AerialPhotography AerialPhotography AerialPhotography BaseMap

BaseMap BaseMap Property BaseMap BaseMap BaseMap BaseMap Property

Boundaries Boundaries Grids Boundaries Boundaries Boundaries Boundaries Grids

City Services InnerCity Zoning City Services Environmental Environmental City Services Transportation

Environmental Environmental Grids Grids Property Zoning

Grids Grids Property Transportation Transportation

Property Property Transportation Tourism

Transportation Tourism

To add a map service to a theme you need to go to the Theme’s tab as seen in figure 71.

Figure 71

A list of themes which have been created will be seen. Select a theme and click update, as shown in

figure 72.

34 | P a g e

Figure 72

Click on the Map Services button to change the map services which will be seen when the theme is

opened, as shown in figure 73.

Figure 73

The order of the map services seen will be that same order in which they will be seen in the Geolis

Webmap viewer. It is important to know which order you would like view the map services because if

you have an image layer showing above all the layers it will cover other map services when shown

together. The map service which is seen on top will be drawn first in the Geolis webmap viewer. This

is seen in figure 74 and 75.

Figure 74

Figure 75

To add a map service to the theme, highlight the map service and click add. To change the order of

the map services use the Up or Down buttons as shown in figure 76.

35 | P a g e

Figure 76

Save the changes and manually close the theme page and click OK. A confirmation that the theme

has been saved will be seen in the top of the tab as shown in figure 77.

Figure 77

5.1.2 ROLES In the Themes tab you can also set which roles will be seen together with the map services. Below

are identified roles which have been added to the map security tool

Administrator Role Planning Role

Common Role Tools Property Role

Extract Role Tool Tourism Role

General Role Transportation Role

Inner City Role Zoning Certificate Role Tool

Map 3 Role Zoning Role

The following roles have been applied to the following themes.

36 | P a g e

General Innercity Map3 Planning Property Tourism Transportation Zoning Common Role

Tools Common Role

Tools Map 3 Role

Administrator Role

Administrator Role Tourism Role Transport Role Zoning Role

General Role Inner City Role Administrator

Role Planning Role Property Role Administrator Role Administrator Role

Administrator Role

Administrator Role

Administrator Role

Zoning Role Common Role

Tools Common Role

Tools Extract Role Tool Extract Role Tool

Common Role Tools

Extract Role Tool

Extract Role Common Role

Tools Extract Role Tool Map 3 Role

Common Role Tools

Common Role Tools

Extract Role Tool

Zoning

Certificate Role Tool

Extract Role Tool Zoning

Certificate Role Tool

Extract Role

Tool

To rearrange the table to see which theme is linked to which tool, see the below table.

Administrator Role

Common Role Tools

Extract Role Tool

General Role

Inner City Role

Map 3 Role

Planning Role

Property Role

Tourism Role

Transportation Role

Zoning Certificate Role Tool

Zoning Role

General General General General Innercity Map3 Planning Property Tourism Tourism Map3 Map3

Innercity Innercity Innercity Zoning Zoning

Map3 Map3 Map3

Planning Planning Planning

Property Property Property

Tourism Tourism Tourism

Transportation Transportation Transportation

Zoning Zoning Zoning

As seen from the tables above you would have more specific theme for your roles. The more general

the role more themes will be liked to that role.

To check which roles are linked to which themes, you go to the themes tab and select the theme you

want to look at as shown in figure 77.

Figure 77

Click the update button, and then click on the Roles button as shown in figure 78.

37 | P a g e

Figure 78

The current roles will be seen under the Current Roles box as shown in figure 79.

Figure 79

Remember to save after every change you do.

5.2. WIDGETS After assigning the roles to the Themes you need to assign the widgets to the roles.

The following roles have been identified for tools.

Common Role Tools

Extract Role Tool


Map 3 Role

In the table below is a list on which tools are linked to which role.

Common Role Tools Extract Role Tool


Map 3 Role

Attribute Search Measure Routing Extract Zoning Certificate Map 3

Bookmarks Metadata Search Scale

Coordinates Navigation Spatial Analysis

Drawing Overview Spatial Query

Identify Pictometry TOC

Imagery Print

Layer Categories Property Search

38 | P a g e

To add a tool to a role you highlight the tool and click the update button as shown in figure 80.

Figure 80

Click on the Roles button and add the new role as seen in figure 81.

Figure 81

Save the changes, then click ok.

5.3. GROUPS The next step is to link the roles to the groups.

The following groups have been identified.

Administrator

Anonymous

CGIS Front Desk

CGIS Projects

Internal Users

39 | P a g e

Land Use Management

Map 3

Below is a table showing which roles are linked to the groups

Administrator Anonymous CGIS Front Desk

CGIS Projects

Internal Users

Land Use Management

Map3

Administrator Role

General Role Zoning Certificate Role Tool


Common Role Tools



Common Role Tools

Common Role Tools

Extract Role Tool

Extract Role Tool

Zoning Role

Extract Role Tool Tourism Role General Role Map 3 Role

General Role Transportation Role

Inner City Role

Inner City Role Planning Role

Map 3 Role Property Role

Planning Role Tourism Role

Property Role Transportation Role

Tourism Role Zoning Role

Transportation Role


Zoning Role

To check which roles are linked to a group you need to go to the Groups tab as seen in figure 82.

Figure 82

Select a group and click the update button as seen in figure 83.

Figure 83

40 | P a g e

Click the roles button to see which roles are assigned to the group as shown in figure 84.

Figure 84

5.4. USERS The final step is to assign the users to groups. You need to go to the Users tab as seen in figure 85.

Figure 85

To add a group you highlight the user and click update as shown in figure 86.

Figure 86

Click on the Groups button and select the groups you want to add to the user as shown in figure 87.

41 | P a g e

Figure 87

Click save when you are done and click ok to save the changes made to the user as shown in figure

88.

Figure 88

Training MS SharePoint Map Security Tool · Server) environment and the configurations have been...

Documents

Transcript of Training MS SharePoint Map Security Tool · Server) environment and the configurations have been...