This demo demonstrate the use of the access filter using the XMLConfig driver, the BorealisACL and MapServer run-time substitution.

In the front-end, depending on which user is currently logged on, a province gets highlighted in red. This is done in a single WMS GetMap request. Try to change user using the above logout button to see it in action.

Here's how it work on the back end. The "Province" resource has an AccessFilter linked to it. It uses an ISSET condition type on the SESSION parameter "prov". If set, a "user_prov" parameter gets automatically append to all requests using this resource. See the config.xml file.

For demo purpose, the session parameter is done in the common.php file, depending on which user is currently logged on. In the end, the WMS GetMap requests for the "Province" resource sent to the proxy automatically have the "user_prov" parameter, which can then be used for run-time substitution in MapServer.

See also the mapfile used by this demo.