In order to fully understand how security works in GeoServer, we will use a typical scenario. Consider an organization working with data in the NaturalEarth workspace. We want to restrict access to this data only to the organization's members. Inside the organization, there are a few people editing data to create new data sets or to update existing ones, and many more members who need to read data to compose maps. There is also a need for an administrator to keep it all working. Lastly, we need to consider that our GeoServer site also contains data that is freely available. We are now going to create the security organization from an unsecured GeoServer.
We will start creating groups. In the security section of the left pane, select the Users, Groups, and Roles link. The following screenshot shows you the User Group Services configured. You will find the default service shipped with GeoServer. We already changed it to use strong PBE encryption and...