[ 
https://jira.duraspace.org/browse/DS-1258?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Ivan Masár updated DS-1258:
---------------------------

    Status: Volunteer Needed  (was: Received)
    
> restrict access to access permissions in mets.xml
> -------------------------------------------------
>
>                 Key: DS-1258
>                 URL: https://jira.duraspace.org/browse/DS-1258
>             Project: DSpace
>          Issue Type: Improvement
>          Components: XMLUI
>            Reporter: Ivan Masár
>             Fix For: 4.0
>
>
> Currently, the information about item access permissions is accessible by 
> adding "?rightsMDTypes=METSRIGHTS" to the item's METS URL, which will embed 
> permission information from METSRightsCrosswalk to METS. E.g.:
> http://demo.dspace.org/xmlui/metadata/handle/10673/3/mets.xml?rightsMDTypes=METSRIGHTS
> It was pointed out that this might be an unintended feature. For the full 
> conversation, see the "bitstream access rights in DRI?" thread: 
> http://www.mail-archive.com/[email protected]/msg17312.html
> I suggest that access to this information should be accessible to the XMLUI 
> themes, so it should be accessible from localhost and this could possibly be 
> configurable to allow access from other hosts, for example for debugging 
> reasons. So we could have something like:
> crosswalk.dissemination.METSRightsCrosswalk.accessible-from = 127.0.0.1, 
> 1.2.3.4/24
> So there are two tasks here:
> 1) render METSRIGHTS in a separate XML document accessible on it's own URL 
> endpoint
> 2) implement access restriction for this endpoint, defaulting to allowed only 
> from localhost (so that themes can have access to it)

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

------------------------------------------------------------------------------
Master HTML5, CSS3, ASP.NET, MVC, AJAX, Knockout.js, Web API and
much more. Get web development skills now with LearnDevNow -
350+ hours of step-by-step video tutorials by Microsoft MVPs and experts.
SALE $99.99 this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122812
_______________________________________________
Dspace-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-devel

Reply via email to