On Mon, Jan 6, 2014 at 4:48 PM, Evgeni Dimitrov <dimitrove....@gmail.com> wrote:
> To be on the safe side - the link passed to the theme is the link to
> the METS file.
> In the METS file are the links with "?sequence=20001&isAllowed=y".

Right.

> Does this mean that the very METS file is dynamically generated -
> depending on the IP of the request?

Hmm, I'm not completely sure about that. It can't be based on IP,
because the XLST processor will be accessing the METS document via
localhost. But as you can see below, to find out the authorization an
AuthorizeManager method is used which uses the current context.
Context has a "current user" property. I didn't walk up the stack
trace to see where context comes from, but it's reasonable to assume
it's bound with the current HTTP request.

https://github.com/DSpace/DSpace/blob/dspace-4.0/dspace-xmlui/src/main/java/org/dspace/app/xmlui/objectmanager/ItemAdapter.java#L1090


Regards,
~~helix84

Compulsory reading: DSpace Mailing List Etiquette
https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette

------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT 
organizations don't have a clear picture of how application performance 
affects their revenue. With AppDynamics, you get 100% visibility into your 
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
_______________________________________________
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette

Reply via email to