EPrints Technical Mailing List Archive

Message: #03472

< Previous (by date) | Next (by date) > | < Previous (in thread) | Next (in thread) > | Messages - Most Recent First | Threads - Most Recent First

[EP-tech] Re: Login required to retrieve requested documents

Hi all,

Thanks for your help on this - Seb’s answer was the winner which has left
me concerned as to where that chunk of code went from the security config
file! Maybe it got bored and wandered off...

Thanks again!

Andrew

On 11/09/2014 02:16, "Mark Gregson" <mark.gregson@qut.edu.au> wrote:

>The behaviour Jiadi describes is standard for EPrints 3.3.  It was the
>same in EPrints 3.2 except that the requester was emailed the document as
>an attachment rather than being provided a link.
>
>Note that there is an active pull request
>(https://github.com/eprints/eprints/pull/262) that will change the
>behaviour of the approval process so that any contact author, registered
>or not, can approve the request.  This will be an optional and will not
>change default behaviour unless explicitly configured.
>
>Cheers
>Mark
>
>
>Mark Gregson | Applications and Development Team Leader
>Library eServices | Queensland University of Technology
>Level 3 | R Block | Kelvin Grove Campus | GPO Box 2434 | Brisbane 4001
>Phone: +61 7 3138 3782 | Web: http://eprints.qut.edu.au/
>ABN: 83 791 724 622
>CRICOS No: 00213J
>
>
>-----Original Message-----
>From: eprints-tech-bounces@ecs.soton.ac.uk
>[mailto:eprints-tech-bounces@ecs.soton.ac.uk] On Behalf Of Jiadi Yao
>Sent: Thursday, 11 September 2014 12:27 AM
>To: eprints-tech@ecs.soton.ac.uk
>Subject: [EP-tech] Re: Login required to retrieve requested documents
>
>Hi,
>
>Just to clarify the standard implementation of the eprints' request a
>copy feature.
>
>When you submit a Request a Copy request, EPrints attempts to find a
>matching user account based on the contact email registered for the
>eprint. If a registered user is found (and the requested eprint has the
>document uploaded), the "Accept" and "Reject" is rendered in the email,
>so the requestee can simply follow these links to approve/reject
>requester's access to the document. Otherwise, the requestee will just
>receive a request email, which he needs to send the original document
>manually.
>
>Once the requestee approves the request, a new email with the direct link
>to download the file is sent to the requester. This link contains a
>special cookie code that allows the requester to download the document
>directly, without login.
>
>However, we have seen in some deployment (especially the single sign
>ons), the login redirects would simply ignore the special cookie code and
>send the requester to the login page anyway.
>
>
>I hope these helps
>Jiadi
>
>
>
>
>On 10/09/2014 14:49, Ian Stuart wrote:
>> On 10/09/14 14:31, Andrew Beeken wrote:
>>> I¹m not trying to be awkward here, just trying to understand this
>>> process as my colleagues here are disagreeing! So, when we or the
>>> academic receives a ³Request Copy² email there is a link in that
>>> email to say ³Approve this request² which then takes them to EPrints
>>> to confirm that they approve the request. The requester then receives
>>> an email with a link to download their document. If you¹re saying
>>> that this can¹t be done then isn¹t the above a redundant feature?
>> Nope - you're not being awkward..... I didn't know it did that (I
>> don't use it)
>>
>> The way it was explained to me was the sending of the document was up
>> to the depositor.
>>
>
>--
>Jiadi Yao
>jy2e08@ecs.soton.ac.uk
>EPrints Services
>3081, Building 32
>University of Southampton
>
>*** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
>*** Archive: http://www.eprints.org/tech.php/
>*** EPrints community wiki: http://wiki.eprints.org/
>*** EPrints developers Forum: http://forum.eprints.org/
>
>*** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
>*** Archive: http://www.eprints.org/tech.php/
>*** EPrints community wiki: http://wiki.eprints.org/
>*** EPrints developers Forum: http://forum.eprints.org/


The University of Lincoln, located in the heart of the city of Lincoln, has established an international reputation based on high student satisfaction, excellent graduate employment and world-class research.

The information in this e-mail and any attachments may be confidential. If you have received this email in error please notify the sender immediately and remove it from your system. Do not disclose the contents to another person or take copies.

Email is not secure and may contain viruses. The University of Lincoln makes every effort to ensure email is sent without viruses, but cannot guarantee this and recommends recipients take appropriate precautions.

The University may monitor email traffic data and content in accordance with its policies and English law. Further information can be found at: http://www.lincoln.ac.uk/legal.