[ 
http://jira.dspace.org/jira/browse/DS-524?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=11424#action_11424
 ] 

Andrea Bollini commented on DS-524:
-----------------------------------

using ldap.enable is not a valid workaround because with this option turned on 
the JSPUI changes also other behaviours (see the registration servlet)
The netid field is a more sensible field than the email because it could be 
used (we done this)  to maintain association with an external system and should 
never be changed... or at least it should be changed only by users that really 
know what they are doing.
We use the netid field with a custom authentication based on CAS and also with 
Shibboleth where the authoritative information is an unique national ID that 
never changes also if user changes his mail

> Eperson netID is lost editing the record from the webUI
> -------------------------------------------------------
>
>                 Key: DS-524
>                 URL: http://jira.dspace.org/jira/browse/DS-524
>             Project: DSpace 1.x
>          Issue Type: Bug
>          Components: JSPUI
>    Affects Versions: 1.5.0, 1.5.1, 1.5.2, 1.6.0
>            Reporter: Andrea Bollini
>             Fix For: 1.7
>
>         Attachments: ds-524-jspui.patch, eperson-edit.jsp.patch
>
>
> Editing an eperson record from the WebUI we lost the netid value.
> The only way to prevent this is set to true the property: ldap.enable
> The property is related to LDAP so I'm not sure if there is other 
> implications to use it... anyway, we need to separate these two concerns. 
> I propose to:
> 1) add a new configuration property to decide if the webUI is allowed to 
> change the netid value; the authorization logic should be checked in the 
> Servlet and not only on the client side as now is
> 2) always show the netid field, when appropriate as a readonly box
> We need to check also the XMLUI to get a common behaviour.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://jira.dspace.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

------------------------------------------------------------------------------

_______________________________________________
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel

Reply via email to