Dear All, I had configured DSpace with Shibboleth. I want to restrict the file access to anonymous, and only accessible by members of a group of people. For that I set a collection policy in with 'TEST_USERGROUP' members can access bitstream. And any anonymous user can see only metadata.
As per the DSpace I set this setting and getting in DSpace log that * 'Added current EPerson to special groups: []'.* Why the member *having role of student >> get special group 'TEST_USERGROUP'* & member *having role staff >> get special group ' staff,Administrator'.* *Role-based Groups:* DSpace is able to place users into pre-defined groups based upon values received from Shibboleth. Using this option you can place all faculty members into a DSpace group when the correct affiliation's attribute is provided. When DSpace does this they are considered 'special groups', these are really groups but the user's membership within these groups is not recorded in the database. Each time a user authenticates they are automatically placed within the pre-defined DSpace group, so if the user loses their affiliation then the next time they login they will no longer be in the group. As per the Documentation I mapped out groups in authentication-shibboleth.cfg authentication-shibboleth.role.faculty = faculty, Administrator authentication-shibboleth.role.staff = staff,Administrator authentication-shibboleth.role.student = TEST_USERGROUP *DSPACE LOG* 2020-08-28 12:50:21,850 INFO org.dspace.browse.BrowseEngine @ anonymous:session_id=8E2867AF9AAAA369911CDCE8C28AB39D:ip_addr=14.139.116.2:browse_mini: 2020-08-28 12:50:21,862 INFO org.dspace.app.webui.discovery.DiscoverUtility @ facets for scope, null: 4 2020-08-28 12:50:22,492 INFO org.dspace.app.webui.servlet.RetrieveServlet @ anonymous:session_id=66C056655BE6695039BDF2D5CC58759F:ip_addr=14.139.116.2:view_bitstream:bitstream_id=dd4911c8-4203-4334-803e-007b5b431930 2020-08-28 12:50:22,493 INFO org.dspace.usage.LoggerUsageEventListener @ anonymous:session_id=66C056655BE6695039BDF2D5CC58759F:ip_addr=14.139.116.2:view_bitstream:bitstream_id=dd4911c8-4203-4334-803e-007b5b431930 2020-08-28 12:50:22,494 INFO org.dspace.app.webui.servlet.RetrieveServlet @ anonymous:session_id=5B344908EA4965610CB84935C2A6F365:ip_addr=14.139.116.2:view_bitstream:bitstream_id=3f6e7bc0-102c-49c2-ad97-b5038f0813fa 2020-08-28 12:50:22,494 INFO org.dspace.usage.LoggerUsageEventListener @ anonymous:session_id=5B344908EA4965610CB84935C2A6F365:ip_addr=14.139.116.2:view_bitstream:bitstream_id=3f6e7bc0-102c-49c2-ad97-b5038f0813fa 2020-08-28 12:50:22,500 INFO org.dspace.app.webui.servlet.RetrieveServlet @ anonymous:session_id=C04C07BF01641FB4D410E9E29DB278A9:ip_addr=14.139.116.2:view_bitstream:bitstream_id=618af9a5-5e21-4829-b7e8-e64f50e562de 2020-08-28 12:50:22,500 INFO org.dspace.usage.LoggerUsageEventListener @ anonymous:session_id=C04C07BF01641FB4D410E9E29DB278A9:ip_addr=14.139.116.2:view_bitstream:bitstream_id=618af9a5-5e21-4829-b7e8-e64f50e562de 2020-08-28 12:50:22,501 INFO org.dspace.app.webui.servlet.RetrieveServlet @ anonymous:session_id=B6B4DB40DE29B7C9772247D1D9CAE922:ip_addr=14.139.116.2:view_bitstream:bitstream_id=e5635638-23ce-40d9-806a-3e93e7e9caeb 2020-08-28 12:50:22,501 INFO org.dspace.usage.LoggerUsageEventListener @ anonymous:session_id=B6B4DB40DE29B7C9772247D1D9CAE922:ip_addr=14.139.116.2:view_bitstream:bitstream_id=e5635638-23ce-40d9-806a-3e93e7e9caeb 2020-08-28 12:50:22,558 INFO org.dspace.app.webui.servlet.RetrieveServlet @ anonymous:session_id=0065057832232BB88C326C679AF9DA07:ip_addr=14.139.116.2:view_bitstream:bitstream_id=c11acccf-aad7-4c01-896f-88c8b9f87501 2020-08-28 12:50:22,558 INFO org.dspace.usage.LoggerUsageEventListener @ anonymous:session_id=0065057832232BB88C326C679AF9DA07:ip_addr=14.139.116.2:view_bitstream:bitstream_id=c11acccf-aad7-4c01-896f-88c8b9f87501 2020-08-28 12:50:22,569 INFO org.dspace.app.webui.servlet.RetrieveServlet @ anonymous:session_id=73001E13DE4AB8243267E8F6B2DBA87B:ip_addr=14.139.116.2:view_bitstream:bitstream_id=1503115a-eaa2-4aee-af60-afd31e73c338 2020-08-28 12:50:22,569 INFO org.dspace.usage.LoggerUsageEventListener @ anonymous:session_id=73001E13DE4AB8243267E8F6B2DBA87B:ip_addr=14.139.116.2:view_bitstream:bitstream_id=1503115a-eaa2-4aee-af60-afd31e73c338 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:host=repository.domain.ac.in 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:connection=keep-alive 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:Cache-Control=max-age=0 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:Upgrade-Insecure-Requests=1 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.135 Safari/537.36 Edg/84.0.522.63 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:accept=text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:Sec-Fetch-Site=same-site 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:Sec-Fetch-Mode=navigate 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:Sec-Fetch-Dest=document 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:referer=https://idp.domain.ac.in/idp/profile/SAML2/Redirect/SSO?execution=e1s2 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:accept-encoding=gzip, deflate, br 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:accept-language=en-US,en;q=0.9 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:cookie=_shibsession_64656661756c7468747470733a2f2f7265706f7369746f72792e636570742e61632e696e2f73686962626f6c657468=_8c57ae931eee6f652b21494c16f48a0a 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:Shib-Cookie-Name= 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:Shib-Session-ID=_8c57ae931eee6f652b21494c16f48a0a 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:Shib-Session-Index=_4c9f8012725190d202f38162784c33a7 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:Shib-Session-Expires=1598628098 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:Shib-Session-Inactivity=1598602898 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:Shib-Identity-Provider=https://idp.domain.ac.in/idp/shibboleth 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:Shib-Authentication-Method=urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:Shib-Authentication-Instant=2020-08-28T07:20:42.418Z 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:Shib-AuthnContext-Class=urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:Shib-AuthnContext-Decl= 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:Shib-Assertion-Count= 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:Shib-Handler=https://repository.domain.ac.in/Shibboleth.sso 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:subject-id= 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:pairwise-id= 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:eppn= 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:[email protected] 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:unscoped-affiliation= 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:entitlement=urn:mace:dir:entitlement:common-lib-terms;https://domain.ac.in/ 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:persistent-id=https://idp.domain.ac.in/idp/shibboleth!https://repository.domain.ac.in/shibboleth!5P8H8W/1RVRGiDCySClY789vU/o= 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:targeted-id= 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:sn=p 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:givenName=xxxxxx 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:[email protected] 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:Shib-Application-ID=default 2020-08-28 12:51:38,410 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ header:REMOTE_USER=https://idp.domain.ac.in/idp/shibboleth!https://repository.domain.ac.in/shibboleth!5P8H8W/1RVRGiDCySClY789vU/o= 2020-08-28 12:51:38,412 INFO org.dspace.authenticate.ShibAuthentication @ Identified EPerson based upon Shibboleth email header: 'mail'='[email protected]'. 2020-08-28 12:51:38,413 INFO org.dspace.content.MetadataValueServiceImpl @ anonymous:session_id=B7FCBF489D7DF9BB587B070A5DBEB62B:ip_addr=14.139.116.2:delete_metadata_value: metadata_value_id=41197 2020-08-28 12:51:38,416 INFO org.dspace.content.MetadataValueServiceImpl @ anonymous:session_id=B7FCBF489D7DF9BB587B070A5DBEB62B:ip_addr=14.139.116.2:delete_metadata_value: metadata_value_id=41198 2020-08-28 12:51:38,418 INFO org.dspace.eperson.EPersonServiceImpl @ anonymous:session_id=B7FCBF489D7DF9BB587B070A5DBEB62B:ip_addr=14.139.116.2:update_eperson:eperson_id=0b0e9be9-4d34-447c-bf78-7f126fc82709 2020-08-28 12:51:38,423 INFO org.dspace.authenticate.ShibAuthentication @ [email protected] has been authenticated via shibboleth. 2020-08-28 12:51:38,423 INFO org.dspace.eperson.EPersonServiceImpl @ [email protected]:session_id=B7FCBF489D7DF9BB587B070A5DBEB62B:ip_addr=14.139.116.2:update_eperson:eperson_id=0b0e9be9-4d34-447c-bf78-7f126fc82709 2020-08-28 12:51:38,454 INFO org.dspace.app.webui.servlet.ShibbolethServlet @ [email protected]:session_id=B7FCBF489D7DF9BB587B070A5DBEB62B:ip_addr=14.139.116.2:login:type=shibboleth *2020-08-28 12:51:38,667 INFO org.dspace.authenticate.ShibAuthentication @ Added current EPerson to special groups: []* 2020-08-28 12:51:38,667 INFO org.dspace.app.webui.servlet.MyDSpaceServlet @ [email protected]:session_id=B7FCBF489D7DF9BB587B070A5DBEB62B:ip_addr=14.139.116.2:view_mydspace: -- With Regards, ============================================= कल्प र. पटेल || Kalp R. Patel परियोजना सहायक, इंफ्लिबनेट केंद्र || Project Assistant, INFLIBNET Centre (An IUC of University Grants Commission) इंफ़ोसिटी, गांधीनगर - ३८२००७ || Infocity, Gandhinagar - 382007 Gujarat, INDIA Web: http://www.inflibnet.ac.in ============================================= -- All messages to this mailing list should adhere to the DuraSpace Code of Conduct: https://duraspace.org/about/policies/code-of-conduct/ --- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/253a4246-e8db-4185-b3dd-4851001aedc1n%40googlegroups.com.
