[ 
https://jira.duraspace.org/browse/DS-927?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=23925#comment-23925
 ] 

Peter Dietz commented on DS-927:
--------------------------------

In a recent DSpace Developers meeting, we agreed that full details about the 
user should not be available to unauthenticated user, so we'll need to swap the 
user information, with just a user ID.

Regarding getting some central service to take care of determining which data 
to make available to each UI, we discussed this in the 2012/01/18 developer 
meeting, and we'd like to get some refactoring to the DSpace code base before 
3.0 to move commonly-repeated-code out of the UI's, and into some common 
business service. Thus, REST shouldn't have to reimplement how to accomplish 
each piece of functionality.


                
> REST-API All item submitter information is returned for an item request, even 
> for an anonymous request.
> -------------------------------------------------------------------------------------------------------
>
>                 Key: DS-927
>                 URL: https://jira.duraspace.org/browse/DS-927
>             Project: DSpace
>          Issue Type: Bug
>          Components: REST API (experimental)
>            Reporter: Robin Taylor
>
> If I enter a request for a specific item eg. 
> http://localhost:8080/rest/items/58.xml the response includes all the ePerson 
> information for the person that submitted the request. This info is not 
> visible in the UI and I suspect should not be exposed here, at least not to a 
> non-administrator.
> <submitter type="bean" size="12">
> <email>robin.tay...@ed.ac.uk</email>
> <firstName>Robin</firstName>
> <fullName>Robin Taylor</fullName>
> <handle/>
> <id type="number">1</id>
> <language>en</language>
> <lastName>Taylor</lastName>
> <name>robin.tay...@ed.ac.uk</name>
> <netId/>
> <requireCertificate type="boolean">false</requireCertificate>
> <selfRegistered type="boolean">false</selfRegistered>
> <type type="number">7</type>
> </submitter>

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://jira.duraspace.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel

Reply via email to