Access Control Layer - Revision history

Libjlrs: /* Other thoughts / useful links */

2014-10-28T17:24:01Z

‎Other thoughts / useful links

Libjlrs at 14:55, 9 October 2014

2014-10-09T14:55:19Z

Libjlrs: Add category

2014-10-09T13:30:20Z

Add category

Libjlrs at 13:08, 9 October 2014

2014-10-09T13:08:17Z

Libjlrs at 16:11, 3 October 2014

2014-10-03T16:11:40Z

Libjlrs at 16:09, 3 October 2014

2014-10-03T16:09:35Z

Libjlrs at 15:55, 3 October 2014

2014-10-03T15:55:59Z

Libjlrs: Initial notes on ACL work

2014-06-30T09:03:11Z

Initial notes on ACL work

New page

This development is designed to allow access restrictions to be placed on EPrints, Documents and other data objects.

The model we're currently work with is:

Authenticating Authority (AA) - a trusted sign-in method that may also provide some knowledge about the person signing in, and offer groupings based on their attributes.

ACLRole - These are configured based on what an AA can offer. When a user signs in, any ACLRoles that the AA can grant to the user are added to their session. A user could sign in via more than one AA at a time.

ACLGroup - A set of ACLRoles that can be applied to an EPrint/Document/?. When access to the item is requested, the session ACLRoles are checked against the allowed ACLRoles. If there is a match, access is granted.

== Other thoughts / useful links ==
*[[:Category:Authentication]]
*http://files.eprints.org/836/ - Webserver authentication using auth_memcookie and simplesamlphp
*[[Webserver authentication]] - Single-sign-on via Shibboleth, CAS/mod_cas, Kerberos or just about any mod_auth_* Module for Apache httpd
*[[CAS]] - Central Authentication Service
*[[LDAP]] - Lightweight Directory Authentication Protocol
*[[Shibboleth authentication]] - UK Federation
*https://www.google.co.uk/search?q=site%3Afiles.eprints.org+authentication - Google files.eprints.org for Authentication
*https://www.google.co.uk/search?q=site%3Abazaar.eprints.org+authentication - same, but on the Bazaar.

← Older revision		Revision as of 14:55, 9 October 2014
Line 1:		Line 1:
		+	{{Template:AccessControl}}
	This development is designed to allow access restrictions to be placed on EPrints, Documents and other data objects.		This development is designed to allow access restrictions to be placed on EPrints, Documents and other data objects.

← Older revision		Revision as of 13:30, 9 October 2014
Line 34:		Line 34:
	*https://www.google.co.uk/search?q=site%3Afiles.eprints.org+authentication - Google files.eprints.org for Authentication		*https://www.google.co.uk/search?q=site%3Afiles.eprints.org+authentication - Google files.eprints.org for Authentication
	*https://www.google.co.uk/search?q=site%3Abazaar.eprints.org+authentication - same, but on the Bazaar.		*https://www.google.co.uk/search?q=site%3Abazaar.eprints.org+authentication - same, but on the Bazaar.
		+
		+	[[Category:Access Control]]

← Older revision		Revision as of 13:08, 9 October 2014
Line 8:		Line 8:

	ACLGroup - A set of ACLRoles that can be applied to an EPrint/Document/?. When access to the item is requested, the session ACLRoles are checked against the allowed ACLRoles. If there is a match, access is granted.		ACLGroup - A set of ACLRoles that can be applied to an EPrint/Document/?. When access to the item is requested, the session ACLRoles are checked against the allowed ACLRoles. If there is a match, access is granted.
		+
		+	== Associated pages ==
		+	These pages have been created as part of the documentation of our work.
		+	*[[Anatomy of a request]]
		+

	== When we make this shizzle, how should it be done? ==		== When we make this shizzle, how should it be done? ==

@@ Line 14: / Line 14: @@
 == Things to do ==
-*LogHandler - what do we log an when?
+*LogHandler - what do we log an when? See ~/perl_lib/EPrints/Apache/Rewrite.pm@515
 *Check poly-lingual behaviour
 *Check behaviour for summary_page and summary_page_denied
 *Abstract summary page handler up to dataobj level
-*Add config options to enable summary pages for specific dataobjs $c->{summary_pages}->{document} = sub{ get eprint -> is archive} type thing
+*Add config options to enable summary pages for specific dataobjs $c->{summary_pages}->{document} = ??? filters/citations/logs?
 == Other thoughts / useful links ==

← Older revision		Revision as of 16:09, 3 October 2014
Line 13:		Line 13:
	*NO text in citation files or other files - use phrases - a la https://github.com/eprints/eprints/commit/cccfab14e0b6764d7f1d80daf57bf4e308f56dd7		*NO text in citation files or other files - use phrases - a la https://github.com/eprints/eprints/commit/cccfab14e0b6764d7f1d80daf57bf4e308f56dd7

		+	== Things to do ==
		+	*LogHandler - what do we log an when?
		+	*Check poly-lingual behaviour
		+	*Check behaviour for summary_page and summary_page_denied
		+	*Abstract summary page handler up to dataobj level
		+	*Add config options to enable summary pages for specific dataobjs $c->{summary_pages}->{document} = sub{ get eprint -> is archive} type thing

	== Other thoughts / useful links ==		== Other thoughts / useful links ==

@@ Line 35: / Line 35: @@
 *https://www.google.co.uk/search?q=site%3Afiles.eprints.org+authentication - Google files.eprints.org for Authentication
 *https://www.google.co.uk/search?q=site%3Abazaar.eprints.org+authentication - same, but on the Bazaar.
 [[Category:Access Control]]

← Older revision		Revision as of 15:55, 3 October 2014
Line 8:		Line 8:

	ACLGroup - A set of ACLRoles that can be applied to an EPrint/Document/?. When access to the item is requested, the session ACLRoles are checked against the allowed ACLRoles. If there is a match, access is granted.		ACLGroup - A set of ACLRoles that can be applied to an EPrint/Document/?. When access to the item is requested, the session ACLRoles are checked against the allowed ACLRoles. If there is a match, access is granted.
		+
		+	== When we make this shizzle, how should it be done? ==
		+	*[[StyleGuide]]
		+	*NO text in citation files or other files - use phrases - a la https://github.com/eprints/eprints/commit/cccfab14e0b6764d7f1d80daf57bf4e308f56dd7