Hi, Christian, as Mark Wood has observed, many people have run into this detail in the past. I would recommend that if it is your intention to create a "dark" archive, that you would be better served to create a non-public instance of DSpace--lock it down via controls either on your servlet container, or controls in your proxy (Apache, Nginx, etc.), if you're using one. This would give you much better control over the materials in the archive, and you would not be relying on the DSpace application to enforce your access rules.
-- HARDY POTTINGER <[email protected]> University of Missouri Library Systems http://lso.umsystem.edu/~pottingerhj/ https://MOspace.umsystem.edu/ "No matter how far down the wrong road you've gone, turn back." --Turkish proverb On 2/6/12 8:45 AM, "Cristian Romanescu" <[email protected]> wrote: >Greetings, > >We have submitted an item within a private collection (only >Administrators can see it). The problem is that the search function >returns the item, even if I am logged out (anonymous). But whenever I >click on search results, I get this message: > >You do not have the credentials to access the restricted item >hdl:123456789/63 . >The selected item is access restricted and requires credentials to view. >Please login to access the item. > >Even more than this, item bitstreams (word documents) are searched and >the item is returned if a match is found. > >Up until now we had a look over the code (AbstractSearch.java) and since >Lucene indexes everything (which is normal), we need to override >performSearch() to handle security before returning the search results. >Before going this road, was anyone hit this issue? > >Any help is greatly appreciated, >Cristian > >-------------------------------------------------------------------------- >---- >Try before you buy = See our experts in action! >The most comprehensive online learning library for Microsoft developers >is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, >Metro Style Apps, more. Free future releases when you subscribe now! >http://p.sf.net/sfu/learndevnow-dev2 >_______________________________________________ >DSpace-tech mailing list >[email protected] >https://lists.sourceforge.net/lists/listinfo/dspace-tech ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2 _______________________________________________ DSpace-tech mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/dspace-tech
