[Dspace-tech] Login with shibboleth: users get rights but are not added to the group

2013-03-07 Thread Lehtilä Tapani
After updating to DSpace 1.8 our submitters do get their rights through 
Shibboleth (for example staff or student), but they are not added to the group 
in Dspace permanently. So these groups stay empty even though users can submit.

I cannot find where to configure this. Is there any way to change this behavior?

Tapani

-- 
Tapani Lehtilä, Tampere University of Technology / Library
tapani.leht...@tut.fi 


--
Symantec Endpoint Protection 12 positioned as A LEADER in The Forrester  
Wave(TM): Endpoint Security, Q1 2013 and remains a good choice in the  
endpoint security space. For insight on selecting the right partner to 
tackle endpoint security challenges, access the full report. 
http://p.sf.net/sfu/symantec-dev2dev
___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette


Re: [Dspace-tech] Login with shibboleth: users get rights but are not added to the group

2013-03-07 Thread helix84
On Thu, Mar 7, 2013 at 2:18 PM, Lehtilä Tapani tapani.leht...@tut.fi wrote:
 After updating to DSpace 1.8 our submitters do get their rights through 
 Shibboleth (for example staff or student), but they are not added to the 
 group in Dspace permanently. So these groups stay empty even though users can 
 submit.

 I cannot find where to configure this. Is there any way to change this 
 behavior?

This is the intended behaviour (thats why they're called special
groups) and AFAIK it cannot be changed. But why would you change it,
is there any problem with it? They are assigned by the authentication
method on login, so there's no point in storing them when the user is
logged off and they can be changed remotely (on Shibboleth IdP) and
become effective on next DSpace login.

You can see your current effective group membership on the profile page.


Regards,
~~helix84

Compulsory reading: DSpace Mailing List Etiquette
https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette

--
Symantec Endpoint Protection 12 positioned as A LEADER in The Forrester  
Wave(TM): Endpoint Security, Q1 2013 and remains a good choice in the  
endpoint security space. For insight on selecting the right partner to 
tackle endpoint security challenges, access the full report. 
http://p.sf.net/sfu/symantec-dev2dev
___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette

Re: [Dspace-tech] Login with shibboleth: users get rights but are not added to the group

2013-03-07 Thread Lehtilä Tapani
Users sometimes complain that they cannot submit and I would like to know, if 
they didn't get their rights through Shibboleth (easy start is to look the 
groups) or they just didn't find the link where to submit. Both has happened 
and many users don't care to read any help information. Parsing the rights from 
logs is somewhat tedious.

But if this is intended I think I just have to manage with it.

Thanks for the answer
Tapani

-- 
Tapani Lehtilä, Tampere University of Technology / Library
tapani.leht...@tut.fi 

-Original Message-
From: ivan.ma...@gmail.com [mailto:ivan.ma...@gmail.com] On Behalf Of
helix84
Sent: Thursday, March 07, 2013 4:15 PM
To: Lehtilä Tapani
Cc: dspace-tech@lists.sourceforge.net
Subject: Re: [Dspace-tech] Login with shibboleth: users get rights but
are not added to the group

On Thu, Mar 7, 2013 at 2:18 PM, Lehtilä Tapani tapani.leht...@tut.fi
wrote:
 After updating to DSpace 1.8 our submitters do get their rights
through Shibboleth (for example staff or student), but they are not
added to the group in Dspace permanently. So these groups stay empty
even though users can submit.

 I cannot find where to configure this. Is there any way to change this
behavior?

This is the intended behaviour (thats why they're called special
groups) and AFAIK it cannot be changed. But why would you change it,
is there any problem with it? They are assigned by the authentication
method on login, so there's no point in storing them when the user is
logged off and they can be changed remotely (on Shibboleth IdP) and
become effective on next DSpace login.

You can see your current effective group membership on the profile page.


Regards,
~~helix84

Compulsory reading: DSpace Mailing List Etiquette
https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette
--
Symantec Endpoint Protection 12 positioned as A LEADER in The Forrester  
Wave(TM): Endpoint Security, Q1 2013 and remains a good choice in the  
endpoint security space. For insight on selecting the right partner to 
tackle endpoint security challenges, access the full report. 
http://p.sf.net/sfu/symantec-dev2dev
___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette