Hi,

I cannot assess whether DSpace would be the right platform for you, but I 
can say something about access restrictions and sensitive data.

DSpace supports access restrictions on a community, collection, item, and 
bitstream (file) level via group memberships. You could create a number of 
communities or collections, e.g. "research papers" (public), "institute 
files" (restricted to members of group "institute") and "administrative 
data" (restricted to members of group "staff"). We successfully use access 
restrictions in our own repository to differentiate between metadata access 
(all institute members) and bitstream access (members of the corresponding 
working group only).

But we were also advised against storing sensitive data in a publicly 
accessible repository, even if it supports access restrictions, at the 
German DSpace user meeting 2018. The reasoning behind that is rather 
simple: like every big software project, DSpace contains security bugs. 
Some were fixed, others are still uncovered.

Kind regards,
Hendrik Geßner

-- 
All messages to this mailing list should adhere to the DuraSpace Code of 
Conduct: https://duraspace.org/about/policies/code-of-conduct/
--- 
You received this message because you are subscribed to the Google Groups 
"DSpace Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/dspace-community.
For more options, visit https://groups.google.com/d/optout.

Reply via email to