#860: WebJournal: add 'viewjournal' WebAccess action
-------------------------+-----------------
Reporter: jcaffaro | Owner:
Type: enhancement | Status: new
Priority: minor | Milestone:
Component: WebJournal | Version:
Keywords: |
-------------------------+-----------------
WebJournal currently does not allow to restrict content to some users
(beside unreleased issues/articles, which can be restricted to
editors/contributors of the journal). It is wanted that one can restrict
access to a given journal to a set of authorized readers.
The easiest solution would be to plug {{{acc_authorize_action(req,
'viewjournal', ...)}}} in the adequate handlers of
{{{webjournal_webinterface.py}}} (6 places?). When no rule is set for a
given journal (or when not rule is set for '''any''' journal) it should be
ensured that the journal is accessible by anyone (beside the existing
restrictions for unreleased issues).
More advanced options might be investigated, though they are not currently
considered as necessary:
* Per issue restrictions, such that some specific issues can be
restricted.
* Per article restrictions, such that some specific articles can be
restricted.
* Support for ''embargoes'', such that only issues older than Foo are
accessible.
* Support for {{{check_user_can_view_record(...)}}} so that the same
restrictions apply in WebSearch interface to view the record as in
WebJournal to view the corresponding article (it should be ensures that
this is optional, for eg. configured per journal in its XML file).
* etc.
The performance impact of this change should be minimized and checked.
--
Ticket URL: <http://invenio-software.org/ticket/860>
Invenio <http://invenio-software.org>
