Embargo XACML policy takes the user to Shib. authentication screen
Posted March 25th, 2011 by ananthan
| Project: | RUcore/NJDH/Partner Portal Search |
| Version: | 5.2 |
| Component: | Searching - Service Agent |
| Category: | bug report |
| Priority: | normal |
| Assigned: | chadmills |
| Status: | closed |
Jump to:
Description
I created an XACML policy in dlr/EDIT for an ETD in Camden Graduate School.
title:Ambivalence Toward Converts in Judaism
Then I tried to access this ETD in rucore and "Login to access PDF" appears. I clicked on the link and it prompted me to authenticate in Shib. Once I was authenticated, I got to the results list. On the results list, "Access not allowed for PDF" is displayed. This will cause a lot of confusion to the users. If an embargo policy is in place, it should state that up front.
Comments
#1
Chad,
This one should goes to you. If you see a object with embargo is set, you should display something like: " this PDF is embargoed"
#2
This is already implemented in the new showfed.
#3
Partially completed. I added some new functionality to the GET API. When a POLICY is found it is tested to see if a date restriction is found in the POLICY and the current access violates it. If so a new attribute, reason, is returned with the HTTP status code. This new attribute value can be used to make the restriction message more intelligent. Next step is to get the service agent aware of this new information and use it properly.
Documentation about the GET API changes can be viewed at the following address:
<a href="http://lefty64.scc-net.rutgers.edu/rucore/api/get/doc/#method-object-list" title="http://lefty64.scc-net.rutgers.edu/rucore/api/get/doc/#method-object-list">http://lefty64.scc-net.rutgers.edu/rucore/api/get/doc/#method-object-lis...</a>
#4
In place in search agent.
#5
I don't get the shib. authentication screen. I am able to see the "embargo message" in the results list.