Difference between revisions of "EPrints User Group 2015-01-13"
(Created page with 'John Salter and John Beaman, University of Leeds ==Intro== * Hello: we're John Salter and John Beaman from the University of Leeds. * We've spent some time trying to write an Ac…') |
(→EPACL: EPrints Access Control Layer) |
||
| Line 25: | Line 25: | ||
* | * | ||
| + | ==Dealing with rejection== | ||
| + | * What happens when someone is denied access? | ||
| + | ** Document landing pages | ||
| + | ** Restricted summary pages | ||
| + | ** Contact details to request access? | ||
| − | + | ==Homeless thoughts== | |
| − | Summary Page citation style | + | *Summary Page citation style |
| − | Access logging | + | *Access logging |
| + | *Login sources | ||
| + | *Modular design | ||
| + | *Request vs User | ||
| + | *Describe ACL_Group, ACL_Role, ACL_Authority | ||
| + | *DOIs at Doc level = landing page citation style | ||
Revision as of 15:32, 8 January 2015
John Salter and John Beaman, University of Leeds
Contents
Intro
- Hello: we're John Salter and John Beaman from the University of Leeds.
- We've spent some time trying to write an Access Control system for EPrints. It's been a horror.
- One of our use-cases is for Research Data, but it could be used on other repository types.
Out of the box User Access Control
- EPrints (you all know what this is, right..?) has basic control at the document level - the 'security' field:
- public (Open Access)
- validuser (anyone who's got an account on that EPrints instance)
- staffonly (Repository editors/admins)
- This doesn't cover the requirements for some repositories...
Requirements
- Control access to EPrints, Documents
- Control access based on:
- User attributes e.g. signed-in via Shibboleth
- Location e.g. on-campus
- Simple interface to assign restrictions
EPACL: EPrints Access Control Layer
- Doesn't overwrite any existing 'security' specified on documents.
Dealing with rejection
- What happens when someone is denied access?
- Document landing pages
- Restricted summary pages
- Contact details to request access?
Homeless thoughts
- Summary Page citation style
- Access logging
- Login sources
- Modular design
- Request vs User
- Describe ACL_Group, ACL_Role, ACL_Authority
- DOIs at Doc level = landing page citation style
