RE: [dspace-tech] 5.10 Discover/Search showing final thumbnail, not first

2018-12-04 Thread Fitchett, Deborah
I think the item-view version should work in the item-list context, assuming 
all variables have been defined. At least on our environment, I’ve customised 
the thumbnail display with some hefty logic and had no trouble copy-pasting the 
same code from item-view to item-list.

Of course the only way to be sure is to try…

Deborah

From: Alex Fletcher 
Sent: Wednesday, 5 December 2018 7:57 AM
To: Fitchett, Deborah 
Cc: DSpace Technical Support 
Subject: Re: [dspace-tech] 5.10 Discover/Search showing final thumbnail, not 
first

Really delayed followup, as other priorities came up (typical).

Comparing the two, they really come down to the src attribute.

item-view.xsl has it presented as:


while item-list.xsl has it as:


It looks like the major difference is in the 'mets:file" call. The question I 
have is -- will the item-view version work in the item-list context, or is it 
too specific?

Alex



On Thu, Nov 8, 2018 at 5:36 PM Fitchett, Deborah 
mailto:deborah.fitch...@lincoln.ac.nz>> wrote:
I haven’t seen that particular problem but I’d check into the item-view.xsl vs 
the item-list.xsl for the code that creates the thumbnail – it sounds like the 
two have slightly different logic.

Deborah

From: dspace-tech@googlegroups.com 
mailto:dspace-tech@googlegroups.com>> On Behalf 
Of Alex Fletcher
Sent: Thursday, 8 November 2018 2:51 AM
To: DSpace Technical Support 
mailto:dspace-tech@googlegroups.com>>
Subject: [dspace-tech] 5.10 Discover/Search showing final thumbnail, not first

We have a collection of art objects/photos on our local implementation, and for 
many objects, the thumbnail that appears on the search results page is taken 
from the last image of the entry, rather than the first one (for example a 
detail of the feet rather than of the whole work). This is a problem, because 
art historians find information by looking at images, and so we have carefully 
selected which is the first image, in order to generate the most helpful 
thumbnail. Now, on the search results page, you are more likely to see a 
secondary image (the building in which a sculpture is located or feet, or 
another odd detail of a sculpture), which makes it difficult to use the 
database for visual research. The odd thing is that when you click on the 
entry, the thumbnail on the individual object page is taken from the first 
image of the entry. So for example on this search page:


https://qspace.library.queensu.ca/discover?scope=1974/14832&rpp=10&page=6&query=Image&group_by=none&etal=0


And then the individual entries:

  *   
https://qspace.library.queensu.ca/handle/1974/24713
  *   
https://qspace.library.queensu.ca/handle/1974/24700
  *   
https://qspace.library.queensu.ca/handle/1974/24701

Has anyone come across this previously and have any advice as to how to correct 
this?



Thanks,



Alex Fletcher

Queen's University Library

Kingston, Ontario, Canada
--
All messages to this mailing list should adhere to the DuraSpace Code of 
Conduct: 
https://duraspace.org/about/policies/code-of-conduct/
---
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
dspace-tech+unsubscr...@googlegroups.com.
To post to this group, send email to 
dspace-tech@googlegroups.com.
Visit this group at 
https://groups.google.com/group/dspace-tech.
For more options, visit 
https://groups.google.com/d/optout.



"The contents of this e-mail (including any attachments) may be confidential 
and/or subject to copyright. Any unauthorised use, distribution, or copying of 
the contents is expressly prohibited. If you have received this e-mail in 
error, please advise the sender by return e-mail or telephone and then delete 
this e-mail together with all attachments from your system."

-- 
All messages to this mailing list should adhere to the DuraSpace Code of 
Conduct: https://duraspace.org/about/policies/code-of-conduct/
--- 
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to dspace-tech+unsubscr...@googlegroups.com.
To post to this group, send email to dspace-tech@googlegroups.com.
Visit this group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.


Re: [dspace-tech] 5.10 Discover/Search showing final thumbnail, not first

2018-12-04 Thread Alex Fletcher
Marking a bitstream as "primary" fixes this -- unfortunately, we have 300+ 
items in the collection that have this problem.

I was hoping that we could find a "code" method to resolve this more 
quickly... unfortunately, that's looking like it may not be possible...

Alex

On Tuesday, 4 December 2018 14:06:01 UTC-5, Terry Brady wrote:
>
> I have experienced a similar issue in the past.
>
> If you mark one of the bitstreams as primary (on the item edit screen), do 
> you see more consistent results?
>
> On Tue, Dec 4, 2018 at 10:56 AM Alex Fletcher  > wrote:
>
>> Really delayed followup, as other priorities came up (typical).
>>
>> Comparing the two, they really come down to the src attribute.
>>
>> item-view.xsl has it presented as:
>> > select="$context/mets:fileSec/mets:fileGrp[@USE='THUMBNAIL']/   
>> mets:file[@GROUPID=current()/@GROUPID]/mets:FLocat[@LOCTYPE='URL']/@xlink:href"/>
>>
>> while item-list.xsl has it as:
>> 
>>
>> It looks like the major difference is in the 'mets:file" call. The 
>> question I have is -- will the item-view version work in the item-list 
>> context, or is it too specific?
>>
>> Alex
>>
>>
>>
>> On Thu, Nov 8, 2018 at 5:36 PM Fitchett, Deborah <
>> deborah@lincoln.ac.nz > wrote:
>>
>>> I haven’t seen that particular problem but I’d check into the 
>>> item-view.xsl vs the item-list.xsl for the code that creates the thumbnail 
>>> – it sounds like the two have slightly different logic.
>>>
>>>  
>>>
>>> Deborah
>>>
>>>  
>>>
>>> *From:* dspac...@googlegroups.com  <
>>> dspac...@googlegroups.com > *On Behalf Of *Alex Fletcher
>>> *Sent:* Thursday, 8 November 2018 2:51 AM
>>> *To:* DSpace Technical Support >
>>> *Subject:* [dspace-tech] 5.10 Discover/Search showing final thumbnail, 
>>> not first
>>>
>>>  
>>>
>>> We have a collection of art objects/photos on our local implementation, 
>>> and for many objects, the thumbnail that appears on the search results page 
>>> is taken from the last image of the entry, rather than the first one (for 
>>> example a detail of the feet rather than of the whole work). This is a 
>>> problem, because art historians find information by looking at images, and 
>>> so we have carefully selected which is the first image, in order to 
>>> generate the most helpful thumbnail. Now, on the search results page, you 
>>> are more likely to see a secondary image (the building in which a sculpture 
>>> is located or feet, or another odd detail of a sculpture), which makes it 
>>> difficult to use the database for visual research. The odd thing is that 
>>> when you click on the entry, the thumbnail on the individual object page is 
>>> taken from the first image of the entry. So for example on this search page:
>>>
>>>  
>>>
>>>
>>> https://qspace.library.queensu.ca/discover?scope=1974/14832&rpp=10&page=6&query=Image&group_by=none&etal=0
>>>
>>>  
>>>
>>> And then the individual entries:
>>>
>>>- https://qspace.library.queensu.ca/handle/1974/24713
>>>- https://qspace.library.queensu.ca/handle/1974/24700
>>>- https://qspace.library.queensu.ca/handle/1974/24701
>>>
>>> Has anyone come across this previously and have any advice as to how to 
>>> correct this?
>>>
>>>  
>>>
>>> Thanks,
>>>
>>>  
>>>
>>> Alex Fletcher
>>>
>>> Queen's University Library
>>>
>>> Kingston, Ontario, Canada
>>>
>>> -- 
>>> All messages to this mailing list should adhere to the DuraSpace Code of 
>>> Conduct: https://duraspace.org/about/policies/code-of-conduct/
>>> --- 
>>> You received this message because you are subscribed to the Google 
>>> Groups "DSpace Technical Support" group.
>>> To unsubscribe from this group and stop receiving emails from it, send 
>>> an email to dspace-tech...@googlegroups.com .
>>> To post to this group, send email to dspac...@googlegroups.com 
>>> .
>>> Visit this group at https://groups.google.com/group/dspace-tech.
>>> For more options, visit https://groups.google.com/d/optout.
>>>
>>> --
>>>
>>> "The contents of this e-mail (including any attachments) may be 
>>> confidential and/or subject to copyright. Any unauthorised use, 
>>> distribution, or copying of the contents is expressly prohibited. If you 
>>> have received this e-mail in error, please advise the sender by return 
>>> e-mail or telephone and then delete this e-mail together with all 
>>> attachments from your system." 
>>>
>> -- 
>> All messages to this mailing list should adhere to the DuraSpace Code of 
>> Conduct: https://duraspace.org/about/policies/code-of-conduct/
>> --- 
>> You received this message because you are subscribed to the Google Groups 
>> "DSpace Technical Support" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to dspace-tech...@googlegroups.com .
>> To post to this group, send email to dspac...@googlegroups.com 
>> .
>> Visit this group at https://groups.google.com/group/dspace-tech.
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>
> -- 
> Terry Brad

Re: [dspace-tech] 5.10 Discover/Search showing final thumbnail, not first

2018-12-04 Thread Terry Brady
I have experienced a similar issue in the past.

If you mark one of the bitstreams as primary (on the item edit screen), do
you see more consistent results?

On Tue, Dec 4, 2018 at 10:56 AM Alex Fletcher 
wrote:

> Really delayed followup, as other priorities came up (typical).
>
> Comparing the two, they really come down to the src attribute.
>
> item-view.xsl has it presented as:
>  select="$context/mets:fileSec/mets:fileGrp[@USE='THUMBNAIL']/
> mets:file[@GROUPID=current()/@GROUPID]/mets:FLocat[@LOCTYPE='URL']/@xlink:href"/>
>
> while item-list.xsl has it as:
> 
>
> It looks like the major difference is in the 'mets:file" call. The
> question I have is -- will the item-view version work in the item-list
> context, or is it too specific?
>
> Alex
>
>
>
> On Thu, Nov 8, 2018 at 5:36 PM Fitchett, Deborah <
> deborah.fitch...@lincoln.ac.nz> wrote:
>
>> I haven’t seen that particular problem but I’d check into the
>> item-view.xsl vs the item-list.xsl for the code that creates the thumbnail
>> – it sounds like the two have slightly different logic.
>>
>>
>>
>> Deborah
>>
>>
>>
>> *From:* dspace-tech@googlegroups.com  *On
>> Behalf Of *Alex Fletcher
>> *Sent:* Thursday, 8 November 2018 2:51 AM
>> *To:* DSpace Technical Support 
>> *Subject:* [dspace-tech] 5.10 Discover/Search showing final thumbnail,
>> not first
>>
>>
>>
>> We have a collection of art objects/photos on our local implementation,
>> and for many objects, the thumbnail that appears on the search results page
>> is taken from the last image of the entry, rather than the first one (for
>> example a detail of the feet rather than of the whole work). This is a
>> problem, because art historians find information by looking at images, and
>> so we have carefully selected which is the first image, in order to
>> generate the most helpful thumbnail. Now, on the search results page, you
>> are more likely to see a secondary image (the building in which a sculpture
>> is located or feet, or another odd detail of a sculpture), which makes it
>> difficult to use the database for visual research. The odd thing is that
>> when you click on the entry, the thumbnail on the individual object page is
>> taken from the first image of the entry. So for example on this search page:
>>
>>
>>
>>
>> https://qspace.library.queensu.ca/discover?scope=1974/14832&rpp=10&page=6&query=Image&group_by=none&etal=0
>>
>>
>>
>> And then the individual entries:
>>
>>- https://qspace.library.queensu.ca/handle/1974/24713
>>- https://qspace.library.queensu.ca/handle/1974/24700
>>- https://qspace.library.queensu.ca/handle/1974/24701
>>
>> Has anyone come across this previously and have any advice as to how to
>> correct this?
>>
>>
>>
>> Thanks,
>>
>>
>>
>> Alex Fletcher
>>
>> Queen's University Library
>>
>> Kingston, Ontario, Canada
>>
>> --
>> All messages to this mailing list should adhere to the DuraSpace Code of
>> Conduct: https://duraspace.org/about/policies/code-of-conduct/
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "DSpace Technical Support" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to dspace-tech+unsubscr...@googlegroups.com.
>> To post to this group, send email to dspace-tech@googlegroups.com.
>> Visit this group at https://groups.google.com/group/dspace-tech.
>> For more options, visit https://groups.google.com/d/optout.
>>
>> --
>>
>> "The contents of this e-mail (including any attachments) may be
>> confidential and/or subject to copyright. Any unauthorised use,
>> distribution, or copying of the contents is expressly prohibited. If you
>> have received this e-mail in error, please advise the sender by return
>> e-mail or telephone and then delete this e-mail together with all
>> attachments from your system."
>>
> --
> All messages to this mailing list should adhere to the DuraSpace Code of
> Conduct: https://duraspace.org/about/policies/code-of-conduct/
> ---
> You received this message because you are subscribed to the Google Groups
> "DSpace Technical Support" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to dspace-tech+unsubscr...@googlegroups.com.
> To post to this group, send email to dspace-tech@googlegroups.com.
> Visit this group at https://groups.google.com/group/dspace-tech.
> For more options, visit https://groups.google.com/d/optout.
>


-- 
Terry Brady
Applications Programmer Analyst
Georgetown University Library Information Technology
https://github.com/terrywbrady/info
425-298-5498 (Seattle, WA)

-- 
All messages to this mailing list should adhere to the DuraSpace Code of 
Conduct: https://duraspace.org/about/policies/code-of-conduct/
--- 
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to dspace-tech+unsubscr...@googlegroups.com.
To pos

Re: [dspace-tech] 5.10 Discover/Search showing final thumbnail, not first

2018-12-04 Thread Alex Fletcher
Really delayed followup, as other priorities came up (typical).

Comparing the two, they really come down to the src attribute.

item-view.xsl has it presented as:


while item-list.xsl has it as:


It looks like the major difference is in the 'mets:file" call. The question
I have is -- will the item-view version work in the item-list context, or
is it too specific?

Alex



On Thu, Nov 8, 2018 at 5:36 PM Fitchett, Deborah <
deborah.fitch...@lincoln.ac.nz> wrote:

> I haven’t seen that particular problem but I’d check into the
> item-view.xsl vs the item-list.xsl for the code that creates the thumbnail
> – it sounds like the two have slightly different logic.
>
>
>
> Deborah
>
>
>
> *From:* dspace-tech@googlegroups.com  *On
> Behalf Of *Alex Fletcher
> *Sent:* Thursday, 8 November 2018 2:51 AM
> *To:* DSpace Technical Support 
> *Subject:* [dspace-tech] 5.10 Discover/Search showing final thumbnail,
> not first
>
>
>
> We have a collection of art objects/photos on our local implementation,
> and for many objects, the thumbnail that appears on the search results page
> is taken from the last image of the entry, rather than the first one (for
> example a detail of the feet rather than of the whole work). This is a
> problem, because art historians find information by looking at images, and
> so we have carefully selected which is the first image, in order to
> generate the most helpful thumbnail. Now, on the search results page, you
> are more likely to see a secondary image (the building in which a sculpture
> is located or feet, or another odd detail of a sculpture), which makes it
> difficult to use the database for visual research. The odd thing is that
> when you click on the entry, the thumbnail on the individual object page is
> taken from the first image of the entry. So for example on this search page:
>
>
>
>
> https://qspace.library.queensu.ca/discover?scope=1974/14832&rpp=10&page=6&query=Image&group_by=none&etal=0
>
>
>
> And then the individual entries:
>
>- https://qspace.library.queensu.ca/handle/1974/24713
>- https://qspace.library.queensu.ca/handle/1974/24700
>- https://qspace.library.queensu.ca/handle/1974/24701
>
> Has anyone come across this previously and have any advice as to how to
> correct this?
>
>
>
> Thanks,
>
>
>
> Alex Fletcher
>
> Queen's University Library
>
> Kingston, Ontario, Canada
>
> --
> All messages to this mailing list should adhere to the DuraSpace Code of
> Conduct: https://duraspace.org/about/policies/code-of-conduct/
> ---
> You received this message because you are subscribed to the Google Groups
> "DSpace Technical Support" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to dspace-tech+unsubscr...@googlegroups.com.
> To post to this group, send email to dspace-tech@googlegroups.com.
> Visit this group at https://groups.google.com/group/dspace-tech.
> For more options, visit https://groups.google.com/d/optout.
>
> --
>
> "The contents of this e-mail (including any attachments) may be
> confidential and/or subject to copyright. Any unauthorised use,
> distribution, or copying of the contents is expressly prohibited. If you
> have received this e-mail in error, please advise the sender by return
> e-mail or telephone and then delete this e-mail together with all
> attachments from your system."
>

-- 
All messages to this mailing list should adhere to the DuraSpace Code of 
Conduct: https://duraspace.org/about/policies/code-of-conduct/
--- 
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to dspace-tech+unsubscr...@googlegroups.com.
To post to this group, send email to dspace-tech@googlegroups.com.
Visit this group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.


[dspace-tech] authorization and policies

2018-12-04 Thread Massimiliano CILURZO
Dear All, 
   I would like to create a group that could submit an item and it isn't an 
admin. ( I don't want that some user remove a collection or other)
I have created a gruop "Staff" but when I go in authorization and choose a 
community (MATH), if I add this group to "MATH" with the policy "ADD" no 
one of the gruop could insert items in the collections or sub community of 
the community MATH.
If I add this gruop to every collections the people couold insert items 
without problem.
I wonder how I can authorize a group for a community?
Is it possible the in a community with a lot of collections I have to add 
the gruop to all single collections with the "ADD" policies?
Thanks
Best regards
Massimiliano

-- 
All messages to this mailing list should adhere to the DuraSpace Code of 
Conduct: https://duraspace.org/about/policies/code-of-conduct/
--- 
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to dspace-tech+unsubscr...@googlegroups.com.
To post to this group, send email to dspace-tech@googlegroups.com.
Visit this group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.


[dspace-tech] Re: [Dspace-tech] DSpace and Cross-site scripting/SQL Injection attack vulnerabilities?

2018-12-04 Thread Liny Paul


> Dear all,
>

How can we enable CSRF in DSpace login and other input forms?
While doing a security audit we got the following feedback. 

problem:User Account Hijack via CSRF
URL: http:///profile 

Risk: VulnerableHigh   

Suggestion: Implement Tokenization

How can we solve this problem?

Any help/guidance in this is appreciated.

regards

Liny Varghese


-- 
All messages to this mailing list should adhere to the DuraSpace Code of 
Conduct: https://duraspace.org/about/policies/code-of-conduct/
--- 
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to dspace-tech+unsubscr...@googlegroups.com.
To post to this group, send email to dspace-tech@googlegroups.com.
Visit this group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.


Re: [dspace-tech] Allow anonymous users to submit to a collection on DSpace 6.3

2018-12-04 Thread Claudia Jürgen

Hello Hardy,

actually anyone is in the anonymous group, even if not logged in. I would not 
give anonymous submit right.
Submission without an eperson would not work, either

Wouldn't that be the use case for a special group see
https://wiki.duraspace.org/display/DSDOC6x/Authentication+Plugins
With the config

authentication-password.login.specialgroup = My Special Group

you can put logged in users into a special group and give this group submission 
rights.

Hope this helps

Claudia Jürgen



Am 04.12.2018 um 06:51 schrieb Hardy Pottinger:

Apologies for working late, but I've got an odd issue I'm tracking down. I
have a DSpace 6.3 repository, which requires certain collections to allow
submissions by members of the anonymous group (i.e. anyone with a login).
This used to work with 6.2. With 6.3 it does not. I have confirmed this
behavior on demo.dspace.org: as an admin, I create a new collection, adding
the anonymous group to the submit permission group, then logging in as a
normal user, I cannot upload to this new collection.

If someone else can confirm this, I'll happily open a new Jira issue.

Thanks!

--Hardy




--
Claudia Juergen
Eldorado

Technische Universität Dortmund
Universitätsbibliothek
Vogelpothsweg 76
44227 Dortmund

Tel.: +49 231-755 40 43
Fax: +49 231-755 40 32
claudia.juer...@tu-dortmund.de
www.ub.tu-dortmund.de

Wichtiger Hinweis: Die Information in dieser E-Mail ist vertraulich. Sie ist 
ausschließlich für den Adressaten bestimmt. Sollten Sie nicht der für diese 
E-Mail bestimmte Adressat sein, unterrichten Sie bitte den Absender und 
vernichten Sie diese Mail. Vielen Dank.
Unbeschadet der Korrespondenz per E-Mail, sind unsere Erklärungen 
ausschließlich final rechtsverbindlich, wenn sie in herkömmlicher Schriftform 
(mit eigenhändiger Unterschrift) oder durch Übermittlung eines solchen 
Schriftstücks per Telefax erfolgen.

Important note: The information included in this e-mail is confidential. It is 
solely intended for the recipient. If you are not the intended recipient of 
this e-mail please contact the sender and delete this message. Thank you. 
Without prejudice of e-mail correspondence, our statements are only legally 
binding when they are made in the conventional written form (with personal 
signature) or when such documents are sent by fax.

--
All messages to this mailing list should adhere to the DuraSpace Code of 
Conduct: https://duraspace.org/about/policies/code-of-conduct/
--- 
You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group.

To unsubscribe from this group and stop receiving emails from it, send an email 
to dspace-tech+unsubscr...@googlegroups.com.
To post to this group, send email to dspace-tech@googlegroups.com.
Visit this group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.