Re: [Dspace-tech] Question about security on items and search results

2012-02-07 Thread Cristian Romanescu

Greetings,

I would like to thank both for sharing this information, I read about 
it, just wanted to make sure I take the proper decision, since it's my 
first project with DSpace :)


The problem I see with two dspace instances is the e-person sharing. 
Basically, in order to use a single set of credentials, we would need to 
deploy LDAP authentication to cover both instances and also Apache's 
Basic Authentication (via mod_auth_ldap).


Read this document on auth 
http://cadair.aber.ac.uk/dspace/bitstream/handle/2160/632/Module%20-%20User%20management%20and%20authentication%20options.pdf?sequence=3 
and I think that would be the option, right?


Thank you,
Cristian

On 02/06/2012 10:17 PM, Pottinger, Hardy J. wrote:

Hi, Christian, as Mark Wood has observed, many people have run into this
detail in the past. I would recommend that if it is your intention to
create a "dark" archive, that you would be better served to create a
non-public instance of DSpace--lock it down via controls either on your
servlet container, or controls in your proxy (Apache, Nginx, etc.), if
you're using one. This would give you much better control over the
materials in the archive, and you would not be relying on the DSpace
application to enforce your access rules.

--
HARDY POTTINGER
University of Missouri Library Systems
http://lso.umsystem.edu/~pottingerhj/
https://MOspace.umsystem.edu/
"No matter how far down the wrong road you've gone,
turn back." --Turkish proverb






On 2/6/12 8:45 AM, "Cristian Romanescu"
wrote:


Greetings,

We have submitted an item within a private collection (only
Administrators can see it). The problem is that the search function
returns the item, even if I am logged out (anonymous). But whenever I
click on search results, I get this message:

You do not have the credentials to access the restricted item
hdl:123456789/63 .
The selected item is access restricted and requires credentials to view.
Please login to access the item.

Even more than this, item bitstreams (word documents) are searched and
the item is returned if a match is found.

Up until now we had a look over the code (AbstractSearch.java) and since
Lucene indexes everything (which is normal), we need to override
performSearch() to handle security before returning the search results.
Before going this road, was anyone hit this issue?

Any help is greatly appreciated,
Cristian

--

Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech



--
Cristian Romanescu
Sr. Software Developer
Eau De Web (http://www.eaudeweb.ro)
55 Clucerului Str, Et. 3, Ap. 7-9
011364 Bucharest

Jabber: cristir...@jabber.eaudeweb.ro
Skype: cristiroma
Mobile: +40 745 133096

<>--
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech


[Dspace-tech] Question about security on items and search results

2012-02-06 Thread Cristian Romanescu
Greetings,

We have submitted an item within a private collection (only 
Administrators can see it). The problem is that the search function 
returns the item, even if I am logged out (anonymous). But whenever I 
click on search results, I get this message:

You do not have the credentials to access the restricted item 
hdl:123456789/63 .
The selected item is access restricted and requires credentials to view. 
Please login to access the item.

Even more than this, item bitstreams (word documents) are searched and 
the item is returned if a match is found.

Up until now we had a look over the code (AbstractSearch.java) and since 
Lucene indexes everything (which is normal), we need to override 
performSearch() to handle security before returning the search results. 
Before going this road, was anyone hit this issue?

Any help is greatly appreciated,
Cristian

--
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech


Re: [Dspace-tech] search can't sort by date issued

2012-02-01 Thread Cristian Romanescu
Greetings,

Have you tried to look into the lucene indexes with Luke tool? 
(http://www.getopt.org/luke/).
We are using:
  search.index.13 = dc_date:dc.date.issued:date
to filter by time interval and it works.

But first, we had to remove the old indexes and re-create them to have 
correct indexing (ie rm -rf $builddir/search and run 
./$builddir/bin/dspace index-init). It only worked when data inside 
index looks like 20120101 ... - when you look with luke tool

HTH,
Cristian


On 02/01/2012 12:46 PM, Päivi Rosenström wrote:
> Any solution for this found yet ?
>
>
> Thanks!
>
> Päivi
>
>
>> Re: [Dspace-tech] search can't sort by date issued
>> From: James Bardin  - 2011-10-27 19:23
>> On Thu, Oct 27, 2011 at 1:52 PM, Blanco, Jose  wrote:
>>> # Browse indexes
>>> webui.browse.index.1 = title:item:title
>>> webui.browse.index.2 = author:metadata:dc.contributor.author:text
>>> webui.browse.index.3 = subject:metadata:dc.subject.*:text
>>> webui.browse.index.4 = dateissued:item:dateissued
>>>
>>> # Sorting options
>>> webui.itemlist.sort-option.1 = title:dc.title:title
>>> webui.itemlist.sort-option.2 = dateissued:dc.date.issued:date
>>> webui.itemlist.sort-option.3 = dateaccessioned:dc.date.accessioned:date
>>>
>> Yeah, I have dateissued in both the browse.index and sort-option, like above.
>> Sorting by dateissued *does* work in browsing, but not for search
>> results (I think search result ordering is done by lucene, and not the
>> webui). I took a guess and added another search index for
>> dateissued:dc.date.issued:date, but that doesn't seem to have any
>> effect.
>
>> -jim
>
>
> --
> Keep Your Developer Skills Current with LearnDevNow!
> The most comprehensive online learning library for Microsoft developers
> is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
> Metro Style Apps, more. Free future releases when you subscribe now!
> http://p.sf.net/sfu/learndevnow-d2d
> ___
> DSpace-tech mailing list
> DSpace-tech@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/dspace-tech


--
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech


Re: [Dspace-tech] Adding more metadata for collection and community objects

2012-01-09 Thread Cristian Romanescu
To me more specific, beside the existing fields (such as description, 
copyright, licence etc.) I would like to add additional fields to a 
collection, such as language, geographical coverage, keywords etc.

I investigated the workflow and seem that all ends into the 
administrative.js cocoon workflow where is called 
FlowContainerUtils.processEditCollection(getDSContext(), collectionID, 
false, cocoon.request);

The method processEditCollection(..) contains hard-coded name of 
database table columns.

I was wondering if it's there's any mean to override the behavior via a 
plugin that intercepts processEditCollection event?
As, for now I am thinking to just override EditCollectionMetadataForm 
class to customize the form and hack into the administrative.js, but 
this would be an ugly mess (thinking for future dspace updates).

Btw, using dspace 1.8.0.


Thanks,
Cristian

On 01/09/2012 04:12 PM, Cristian Romanescu wrote:
> Greetings,
>
> I would like to add more fields to the collection and community items.
>
> I looked into the PostgreSQL database and I see "community" and
> "collection" tables, where each dc:schema field is a column within the
> table.
> Also the documentation mentions something about enabling metadata for
> all dspace objects as development proposal
> (https://wiki.duraspace.org/display/DSPACE/Metadata+For+All). I will
> also have though a look into the source code.
>
> Is there any way to do this without modifying DSpace core functionality?
> I cannot find any reference on the documentation.
>
>
> Thanks,
> Cristian
>
> --
> Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex
> infrastructure or vast IT resources to deliver seamless, secure access to
> virtual desktops. With this all-in-one solution, easily deploy virtual
> desktops for less than the cost of PCs and save 60% on VDI infrastructure
> costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
> ___
> DSpace-tech mailing list
> DSpace-tech@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/dspace-tech


--
Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex
infrastructure or vast IT resources to deliver seamless, secure access to
virtual desktops. With this all-in-one solution, easily deploy virtual 
desktops for less than the cost of PCs and save 60% on VDI infrastructure 
costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech


[Dspace-tech] Adding more metadata for collection and community objects

2012-01-09 Thread Cristian Romanescu
Greetings,

I would like to add more fields to the collection and community items.

I looked into the PostgreSQL database and I see "community" and 
"collection" tables, where each dc:schema field is a column within the 
table.
Also the documentation mentions something about enabling metadata for 
all dspace objects as development proposal 
(https://wiki.duraspace.org/display/DSPACE/Metadata+For+All). I will 
also have though a look into the source code.

Is there any way to do this without modifying DSpace core functionality? 
I cannot find any reference on the documentation.


Thanks,
Cristian

--
Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex
infrastructure or vast IT resources to deliver seamless, secure access to
virtual desktops. With this all-in-one solution, easily deploy virtual 
desktops for less than the cost of PCs and save 60% on VDI infrastructure 
costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech


[Dspace-tech] Rendering communitybrowser twice in page

2012-01-06 Thread Cristian Romanescu
Greetings,

I would like to list the community browser in each page within left 
column, as portlet.
I edited sitemap.xmap XML to include CommunityBrowser in each page 
(index, list view, item view).

The problem is that I do not know how to make community browser appear 
only in right column (and not also within the middle column).
Does anyone knows how avoid this?

I have a test server here: 
http://knossos.eaudeweb.ro/xmlui/handle/123456789/26

Cheers,
Cristian

--
Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex
infrastructure or vast IT resources to deliver seamless, secure access to
virtual desktops. With this all-in-one solution, easily deploy virtual 
desktops for less than the cost of PCs and save 60% on VDI infrastructure 
costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech


Re: [Dspace-tech] Custom submission based on dc:type

2011-12-20 Thread Cristian Romanescu
Hi again,

Just to answer my own question. I think I come up with a clever idea on 
showing various fields depending on dc:type. I put all the fields into a 
single step workflow (since I only have about 15 unique properties) and 
I will show/hide fields depending on what user selects on the first 
field of the form which is dc:type.

First the user selects 'Book', so I show from Javascript 'title', 
'ISBN'. If changes to Contact - I hide those and show name and email etc.

-- Cristian




On 12/19/2011 05:23 PM, Cristian Romanescu wrote:
> Greetings,
>
> I'm a newcomer here, using DSpace since last week, hopefully posting to
> the correct mailing list.
>
> I'm customizing DSpace instance where we have Communities ->  Collections
> ->  Items (that differ from each other by dc:type). Items can be: people,
> books etc., each having its own set of fields, but also common fields
> (name).
>
> By reading the manual I found out that item-submission.xml can be
> customized only for each type of collection, but not for item type from
> a collection.
>
> Is this true? Or can I customize the forms for each item type (different
> dc:type) in subsequent steps of the workflow? I'm wondering how you
> handled such a scenario in DSpace.
>
>
> Thank you and any help is appreciated,
> Cristian.
>
>
> --
> Learn Windows Azure Live!  Tuesday, Dec 13, 2011
> Microsoft is holding a special Learn Windows Azure training event for
> developers. It will provide a great way to learn Windows Azure and what it
> provides. You can attend the event by watching it streamed LIVE online.
> Learn more at http://p.sf.net/sfu/ms-windowsazure
> ___
> DSpace-tech mailing list
> DSpace-tech@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/dspace-tech


--
Write once. Port to many.
Get the SDK and tools to simplify cross-platform app development. Create 
new or port existing apps to sell to consumers worldwide. Explore the 
Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
http://p.sf.net/sfu/intel-appdev
___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech


[Dspace-tech] Custom submission based on dc:type

2011-12-19 Thread Cristian Romanescu
Greetings,

I'm a newcomer here, using DSpace since last week, hopefully posting to 
the correct mailing list.

I'm customizing DSpace instance where we have Communities -> Collections 
-> Items (that differ from each other by dc:type). Items can be: people, 
books etc., each having its own set of fields, but also common fields 
(name).

By reading the manual I found out that item-submission.xml can be 
customized only for each type of collection, but not for item type from 
a collection.

Is this true? Or can I customize the forms for each item type (different 
dc:type) in subsequent steps of the workflow? I'm wondering how you 
handled such a scenario in DSpace.


Thank you and any help is appreciated,
Cristian.


--
Learn Windows Azure Live!  Tuesday, Dec 13, 2011
Microsoft is holding a special Learn Windows Azure training event for 
developers. It will provide a great way to learn Windows Azure and what it 
provides. You can attend the event by watching it streamed LIVE online.  
Learn more at http://p.sf.net/sfu/ms-windowsazure
___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech