EPrints Technical Mailing List Archive

See the EPrints wiki for instructions on how to join this mailing list and related information.

Message: #09522

< Previous (by date) | Next (by date) > | < Previous (in thread) | Next (in thread) > | Messages - Most Recent First | Threads - Most Recent First

RE: [EP-tech] Cookies , User-Inform

CAUTION: This e-mail originated outside the University of Southampton.

Hi Tomasz,
Cookies are also used if you enable the pin-based security for the request-a-copy (RaC) functionality.

A successful RaC generates a link that contains a code. This is exchanged for a Cookie [1] which then allows the bearer to download the document:

[1] https://github.com/eprints/eprints3.4/blob/98f41c2b64/cgi/process_request#L81-L116

[2] https://github.com/eprints/eprints3.4/blob/98f41c2b64/lib/cfg.d/security.pl#L23-L50

 

I would see the above as something other than a ‘logged in user’. The EU rules have a clause around cookies that are necessary for the system to function, which IMO covers the above scenario.

 

I’m not sure if cookies are also used in any other parts of EPrints too?

Worth investigating Google Analytics; Recaptcha or IRstats (with Google charts) if you use any of these components.

 

Cheers,

John

 

From: eprints-tech-request@ecs.soton.ac.uk <eprints-tech-request@ecs.soton.ac.uk> On Behalf Of Tomasz Neugebauer
Sent: 11 January 2024 21:36
To: eprints-tech@ecs.soton.ac.uk
Subject: RE: [EP-tech] Cookies , User-Inform

 

CAUTION: External Message. Use caution opening links and attachments.

CAUTION: This e-mail originated outside the University of Southampton.

CAUTION: This e-mail originated outside the University of Southampton.

A follow-up on this thread I found about use of cookies in Eprints: is it still the case that EPrints “by default only has cookies for managing state for logged in users”? 

We have some new legislation in Quebec that requires consent for cookies, similar to EU rules, so I need to figure out if we need a banner or not. 

 

Best wishes,

Tomasz

 

From: eprints-tech-bounces@ecs.soton.ac.uk <eprints-tech-bounces@ecs.soton.ac.uk> On Behalf Of Stenger, Avischai via Eprints-tech
Sent: March 8, 2021 9:04 AM
To: eprints-tech@ecs.soton.ac.uk; David R Newman <drn@ecs.soton.ac.uk>
Subject: Re: [EP-tech] Cookies , User-Inform

 

CAUTION: This e-mail originated outside the University of Southampton.

Tnks David.

 

Am 08.03.2021 um 12:55 schrieb David R Newman via Eprints-tech <eprints-tech@ecs.soton.ac.uk>:

 

Hi Avi,

Looking at the plugin on the Bazaar of which you refer, I think anything else out there would be of a similar form.  How to go about informing users of the use of cookies and then the (ironic) use of a cookie to avoid repeating this message on every page, has not really fundamentally changed since 2014.  With this plugin you would need make various configuration tweaks, such as to link to your own cookies policy.  There would also be nothing to stop you configuring (or re-coding) this further to meet various specific aesthetic or functional requirements.  However, some functional requirements may be more difficult than others to implement.

EPrints by default only has cookies for managing state for logged in users.  Under original EU regulations regarding cookies ,technically did not require users to be informed about this, (because these cookies are functionally essential and site specific).  However, people tended to err on the side of caution and inform users anyway.  Lots of repositories have Google Analytics, which might be something you want users to be able to opt out of.  Modifying the existing cookie plugin or building your own to allow opting out of certain cookies would be quite complex.  Also, as the use of any other cookies is bespoke to a repository, writing a generic cookies plugin would entail a lot of work to build a framework for the management of cookies on a case-by-case basis.

Regards

David Newman

On 08/03/2021 10:15, Stenger, Avischai via Eprints-tech wrote:

CAUTION: This e-mail originated outside the University of Southampton.

Hallo,

 

Dose someone here have a Tip/Experience/Plugin/Add-on that fullfill the (relative) new  “EU-Verordnung“ regarding cookies  use?  beside this  plugin http://bazaar.eprints.org/356/ from 2014 ?

 

 

 

Tnks & Regards

 

Avi

 

*** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
*** Archive: http://www.eprints.org/tech.php/
*** EPrints community wiki: http://wiki.eprints.org/

 

Virus-free. www.avg.com

*** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
*** Archive: http://www.eprints.org/tech.php/
*** EPrints community wiki: http://wiki.eprints.org/