Hans-
It is difficult to answer this question without knowing what policy
modifications you have made. By default, the request you describe- an
"APIA," or "access" request for COVERIMAGE/content - is neither restricted
by IP address nor restricted to authenticated users. However, if your
colleagues are requesting only the datastream profile (
/fedora/objects/xyz:so.359385_1/datastreams/COVERIMAGE), then by default
they will be restricted both by IP address and authentication.
Making changes that would alter that situation so that all requests
required authentication could happen in any XACML policy your Fedora
installation loads (and, typically, all of the XACML files in the policy
directory are loaded). I would examine all the changes you have made to the
policies, including changes to subdirectories of the policy directory
(these are probably also loaded after Fedroa 3.6).
Regards,
Ben
On Thu, Oct 17, 2013 at 9:43 AM, Hans Scholte <[email protected]> wrote:
> Hi,
>
> I have in my objects a COVERIMAGE datastream (an managed datastream) and I
> have no problem accessing this via the url
> ../fedora/objects/xyz:so.359385_1/datastreams/COVERIMAGE/content
>
> But, my colleagues are asked for a username/password when trying to access
> this url.
> Their IP-adresses are in
>
> ../data/fedora-xacml-policies/repository-policies/default/deny-apim-if-not-localhost.xml
> file (as is mine).
>
> What other file(s) can keep them from reading this content?
>
> Regards,
> Hans
>
>
>
>
>
>
> --
> View this message in context:
> http://fedora-commons.1317035.n2.nabble.com/username-password-for-getting-content-tp7579246.html
> Sent from the Fedora Commons Users mailing list archive at Nabble.com.
>
>
> ------------------------------------------------------------------------------
> October Webinars: Code for Performance
> Free Intel webinars can help you accelerate application performance.
> Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most
> from
> the latest Intel processors and coprocessors. See abstracts and register >
> http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk
> _______________________________________________
> Fedora-commons-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
>
------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk
_______________________________________________
Fedora-commons-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
