Browse Workspace assets from QGIS

Private pilot: tested on Mac QGIS 4.2.2 with the configured Keycloak provider. Ask your administrator for the connector installation and HTTPS Workspace address. This is maintained source/pilot packaging, not a public plugin-store release.

Install the plugin

Your administrator writes ophiolite_scalar_maps-<version>.zip from the release with ./ophiolite-ops client-kit (Install); it is built reproducibly from the Connectors source in every qualification run. In QGIS 4.0 or later choose Plugins → Manage and Install Plugins → Install from ZIP. The plugin uses the GDAL and NumPy modules QGIS ships and runs on macOS and Linux (not Windows). No licence has been selected for it yet: it is for pilot installation by your organisation only and is not published in a QGIS plugin repository. Installing this zip in QGIS 4.2.2 on macOS is still to be checked by the owner.

Sign in and add a map

1. In the Ophiolite maps dock, choose Add a map….
2. Enter the Workspace server address, then Sign in through browser.
3. Check the code and the account shown in the browser, then approve QGIS. Existing browser sign-in may avoid retyping your password; QGIS still receives its own authorization. It does not read browser cookies.
4. Set or unlock QGIS’s authentication master password when prompted. This protects the saved connection locally and is separate from your Workspace password.
5. Choose a project and scalar map. Review its units, range, missing samples, grid, coordinate system and vertical reference before adding it.
6. Choose Add this map.

From a map’s page in the Workspace. Open Open in QGIS on the page and copy the address. In Add a map…, paste it under “Or paste the address of a map’s page in the Workspace” and choose Use this address: the dialog chooses that map at the version the page showed, and you review it as above before adding it. If you are not signed in yet, the address is kept until you are. An address of stored data, of a version that cannot be read or on another server is refused in words.

An enrolled account and explicit scientific project access are required. Organization membership alone is insufficient. Only conformant scalar maps are currently supported; curves and whole reservoir models are not offered here.

Check, get and go back

Each map on your QGIS map shows one version, and it stays on that version until you choose otherwise. The dock has one row per map: its name, the version it shows and who added it, and only the buttons that can act.

Button	What happens
Check for updates	Asks the project whether a newer version exists. The row then says, for example, “Version 8 is available (added by you, 12 minutes ago).” Your map does not change. QGIS also checks by itself about once a minute; those checks never change the map either.
Get latest	Shows the newer version. Your colours, layer order and local contours are kept; contours are made again from the new values.
Go back to version 7	Shows the version you had before your last Get latest (one step; a map managed outside the project says “the previous version”).
Open in Workspace	Opens the map’s page in your browser at the version your map shows, not the newest. The address carries no sign-in or key; the browser signs in on its own.
Keep a separate copy	Stops checking this map. The layer stays on this computer and is no longer linked to the project.

Nothing changes on your map until you choose Get latest. A separate copy does not grant independent retention rights; keeping it requires its own permission.

The raster keeps its source CRS; QGIS transforms its display to your project CRS. The connector does not change the project CRS, scalar units or vertical datum. Unknown coordinates and unavailable transformations require explicit resolution; see coordinate behavior. Local contours and colors are presentation; they do not alter scientific values.

Send a result to the project

Make a result with QGIS tools (the Raster Calculator, for example), select it, then choose Send to project… on the row of the map it was made from. The review shows the values, missing samples, unit and coordinate system the project will receive and who will see it. Choose Send.

• The result becomes the map’s next version when it keeps the map’s meaning and grid. Everyone who can see the map is told a newer version exists; nothing changes on their screens until they choose Get latest.
• If someone added a newer version since the one your map shows, nothing is sent. You can look at their version first, or send yours as a separate map.
• A result that changes the meaning or grid, or one made from a map managed outside the project, is offered as a separate map instead.
• If QGIS cannot tell whether the send arrived (the connection broke after sending), the row says so and offers Send again and Discard…. Send again repeats the same request, so the project never stores it twice, even after QGIS restarts.
• Sending the same values again changes nothing in the project.

A map opened through a connection file is never sent from QGIS.

Save and recover

Save the normal QGIS project. Its layer bindings contain identity, the version shown, the connection, the cache location and an opaque reference to QGIS’s encrypted authentication database. The project contains no access or refresh token. Sharing that project does not share authorization. Downloaded rasters themselves are local files, not encrypted by the credential store.

For another machine, expired sign-in or a different account: sign in again, select the existing connected raster, and choose Reconnect selected QGIS layer with this account. The owning server must match. Reconnect each binding you need. Permissions are checked again on the server. A failed update retains the last snapshot; it does not establish that you still have access.

Disconnect this account revokes the connector authorization and removes its saved credential. It leaves the browser signed in. Downloaded copies remain on disk. If revocation cannot reach the provider, use its account/session settings to revoke access; the local credential is still removed.

Scope and evidence

Check, get, go back and send were qualified in QGIS 4.2.2 on Linux (the qgis/qgis:4.2.2 image, release 2026.10.37): the delivered values, the row words, Go back with the local copy present, damaged and missing, a send as the next version, a refused stale send, a separate map, a lost answer and Send again after a QGIS restart. That run used a connection file; browser sign-in there was covered by a scripted provider. Earlier actual Mac QGIS tests (connector 0.7) covered the encrypted credential round-trip, project and map browsing, preserved project CRS and saved-project reopening; the check, get and send buttons are still to be checked by the owner on a Mac. Real provider/browser tests covered device approval, refresh, denied access and disconnect without browser logout. The tests exercised these pieces together through the API and QGIS host; the full manual browser approval initiated from QGIS still requires user acceptance testing.

General provider compatibility, high-client-count throughput, a stable SDK and OSDU-backed raster parity remain unqualified. The current native project service is the scientific authority. Connector identity API.

Signing in as another account does not silently change existing layer bindings. They retain their original authorization until explicitly reconnected.

For results with a scientific context, see scientific context review. QGIS does not claim universal edit tracking or automatic vertical-datum conversion.