Project

General

Profile

bug #6115

protect cdm content by drupal permission

Added by Andreas Kohlbecker almost 3 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
New
Category:
cdm-dataportal
Target version:
Start date:
12/01/2016
Due date:
% Done:

100%

Severity:
normal
Found in Version:

Description

A couple of portals are currently in maintenance mode because the taxa and names must not be disclosed to the public.
I would be better to protect all content coming from the cdm with a drupal permission: view cdm content

By default this permission should be given to the role 'anonymous user' and 'authenticated user'

TASKS:

  • implement permission view cdm content
  • implement update
  • modify installation profile

Making the cdm content inaccessible by making use of this role requires a few steps:

  1. Adapt the permission Access CDM content in admin/people/permissions. E.g. withdraw the permission Access CDM content from the anonymous user
  2. Configure the visibility of the activated cdm blocks by restricting the block visibility to specific roles. In the block configuration form (Structure->Blocks-->Configure): Roles --> Show block for specific roles. E.g. Allow all roles except anonymous user:
    • CDM taxon tree admin/structure/block/manage/cdm_taxontree/cdm_tree/configure
    • CDM - Search Taxa admin/structure/block/manage/cdm_dataportal/2/configure
    • CDM - Classification breadcrumbs
    • CDM - Taxonomic children
    • CDM - Identification keys

Subtasks

bug #6235: page duplication when accessing resticted contentRejectedAndreas Kohlbecker

Associated revisions

Revision c6fe437b (diff)
Added by Andreas Kohlbecker almost 3 years ago

fix #6115 protecting all cdm content with new permission

Revision 239c4040 (diff)
Added by Andreas Kohlbecker almost 3 years ago

fix #6115 adding missing permission check to cdm nodes integration

History

#1 Updated by Andreas Kohlbecker almost 3 years ago

  • Status changed from New to Resolved
  • % Done changed from 0 to 50

Applied in changeset cdm-dataportal:commit:cdm-dataportal|c6fe437bfe330b2aa1cc96d32d956edfc14f8b19.

#2 Updated by Andreas Kohlbecker almost 3 years ago

  • Assignee changed from Andreas Kohlbecker to Andreas Müller

Hi Andreas,

the review of this ticket need intensive testing. I suggest we use one of the published portals on the edit-test server to configure it so that we can reproduce the use case of the caryophyllales portals. We could use the euro+med portal for this purpose.

Andreas

http://test.e-taxonomy.eu/dataportal/preview/euromed/

#3 Updated by Andreas Kohlbecker almost 3 years ago

  • Status changed from Resolved to In Progress

The protection can be by passed by accesing the the content via the drupal node integration. An according check must be implemented in the node integration.

#4 Updated by Andreas Kohlbecker almost 3 years ago

  • Assignee changed from Andreas Müller to Andreas Kohlbecker

#5 Updated by Andreas Kohlbecker almost 3 years ago

  • Description updated (diff)

#6 Updated by Andreas Kohlbecker almost 3 years ago

  • Description updated (diff)

#7 Updated by Andreas Kohlbecker almost 3 years ago

  • Description updated (diff)

#8 Updated by Andreas Müller almost 3 years ago

  • Assignee changed from Andreas Kohlbecker to Andreas Müller

Currently the taxon tree is still shown at Flora Malesiana: http://test.e-taxonomy.eu/dataportal/preview/flora-malesiana/

But maybe this is only an update problem as the same does not happen at Euro+Med

#9 Updated by Andreas Müller almost 3 years ago

  • Assignee changed from Andreas Müller to Andreas Kohlbecker

#10 Updated by Andreas Kohlbecker almost 3 years ago

Andreas Müller wrote:

Currently the taxon tree is still shown at Flora Malesiana: http://test.e-taxonomy.eu/dataportal/preview/flora-malesiana/

But maybe this is only an update problem as the same does not happen at Euro+Med

As explained in the updated issue description the block must be configured individually. This is neither a bug not an update problem. The implementation of the new permission was the missing feature. With this permission a portal can now configure so that no cdm content is undisclosed. Except for the bug described in comment 3

#11 Updated by Andreas Kohlbecker almost 3 years ago

  • Status changed from In Progress to Resolved

#12 Updated by Andreas Kohlbecker almost 3 years ago

  • Assignee changed from Andreas Kohlbecker to Andreas Müller

I fixed the above described bug. Please test again.

NOTE: There is a new section in the description on how to test this feature.

#13 Updated by Andreas Müller over 2 years ago

  • Description updated (diff)

#14 Updated by Andreas Müller over 2 years ago

  • Status changed from Resolved to Feedback
  • Assignee changed from Andreas Müller to Andreas Kohlbecker

Seems to work, so we can close this ticket.

Only issue is that it is difficult to use so I wonder if we can't have a one click solution that does all this in background, if possible.

#15 Updated by Andreas Kohlbecker over 2 years ago

  • Status changed from Feedback to Closed

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 40 MB)