Hello Samuele & co,

[...]
> Indeed I confirm what Lars just replied you. In:
>
> [...]
> commit befb8c141fbea99bed7ae19e80bfb572302dedad
> Author: Samuele Kaplun <[email protected]>
> Date:   Wed Jun 16 09:06:24 2010 +0200
>
>     WebSearch: protect new records
[...]
> we have added this additional security steps to protect brand new
> records which a priory could be potentially restricted, by virtue of
> their potential membership to a restricted collection, before such
> membership has been already computed by webcoll.
>
> Regarding the workaround, I think that we can propose a patch so that,
> if you authorize your cataloguers role to run action “viewrestrcoll”
> with collection “*”, this should allow them to see any temporary
> restricted record too.
>
> I’ll prepare a quick patch.

Now I understand.  However, we have also noticed that this restriction
to those records that belong to orphan collections.

We have a few collections that do not belong to the «public tree» of
collections, either because they are not ready for public consumption
(yet), or because created them for internal uses.  In our case, they are
not strict secret, so we were not worried if anybody accidentally saw
them.  As I understand your workaround, those records will be restricted
to, at least, registered users with a known role.  I'm not yet sure if
we would prefer the old scenario, but I'd like to know it just to
discuss it internally.

Thanks,

Ferran

Reply via email to