The core idea of Cartaro is the closest possible integration of geodata with other content in a single software stack. This aspect also extends to the common management of users, roles and their permissions, meaning you should be able to apply the same security mechanisms and permissions for spatial and non-spatial content. Within Cartaro the permissions for non-spatial content are handled by Drupal. GeoServer, on the other hand, is responsible to deliver optionally protected geospatial data to the web either through web services (OWS) or through a number of downloadable file formats.