bug #6115
closedprotect cdm content by drupal permission
100%
Description
A couple of portals are currently in maintenance mode because the taxa and names must not be disclosed to the public.
I would be better to protect all content coming from the cdm with a drupal permission: view cdm content
By default this permission should be given to the role 'anonymous user' and 'authenticated user'
TASKS:
- implement permission
view cdm content
- implement update
- modify installation profile
Making the cdm content inaccessible by making use of this role requires a few steps:
- Adapt the permission Access CDM content in
admin/people/permissions
. E.g. withdraw the permission Access CDM content from the anonymous user - Configure the visibility of the activated cdm blocks by restricting the block visibility to specific roles. In the block configuration form (Structure->Blocks-->Configure): Roles --> Show block for specific roles. E.g. Allow all roles except anonymous user:
- CDM taxon tree admin/structure/block/manage/cdm_taxontree/cdm_tree/configure
- CDM - Search Taxa admin/structure/block/manage/cdm_dataportal/2/configure
- CDM - Classification breadcrumbs
- CDM - Taxonomic children
- CDM - Identification keys
Updated by Andreas Kohlbecker over 7 years ago
- Status changed from New to Resolved
- % Done changed from 0 to 50
Applied in changeset cdm-dataportal:commit:cdm-dataportal|c6fe437bfe330b2aa1cc96d32d956edfc14f8b19.
Updated by Andreas Kohlbecker over 7 years ago
- Assignee changed from Andreas Kohlbecker to Andreas Müller
Hi Andreas,
the review of this ticket need intensive testing. I suggest we use one of the published portals on the edit-test server to configure it so that we can reproduce the use case of the caryophyllales portals. We could use the euro+med portal for this purpose.
Andreas
Updated by Andreas Kohlbecker over 7 years ago
- Status changed from Resolved to In Progress
The protection can be by passed by accesing the the content via the drupal node integration. An according check must be implemented in the node integration.
Updated by Andreas Kohlbecker over 7 years ago
- Assignee changed from Andreas Müller to Andreas Kohlbecker
Updated by Andreas Müller over 7 years ago
- Assignee changed from Andreas Kohlbecker to Andreas Müller
Currently the taxon tree is still shown at Flora Malesiana: http://test.e-taxonomy.eu/dataportal/preview/flora-malesiana/
But maybe this is only an update problem as the same does not happen at Euro+Med
Updated by Andreas Müller over 7 years ago
- Assignee changed from Andreas Müller to Andreas Kohlbecker
Updated by Andreas Kohlbecker over 7 years ago
Andreas Müller wrote:
Currently the taxon tree is still shown at Flora Malesiana: http://test.e-taxonomy.eu/dataportal/preview/flora-malesiana/
But maybe this is only an update problem as the same does not happen at Euro+Med
As explained in the updated issue description the block must be configured individually. This is neither a bug not an update problem. The implementation of the new permission was the missing feature. With this permission a portal can now configure so that no cdm content is undisclosed. Except for the bug described in comment 3
Updated by Andreas Kohlbecker over 7 years ago
- Status changed from In Progress to Resolved
Applied in changeset cdm-dataportal|239c4040ea26be2c36b2344e4aa276f27bee55db.
Updated by Andreas Kohlbecker over 7 years ago
- Assignee changed from Andreas Kohlbecker to Andreas Müller
I fixed the above described bug. Please test again.
NOTE: There is a new section in the description on how to test this feature.
Updated by Andreas Müller about 7 years ago
- Status changed from Resolved to Feedback
- Assignee changed from Andreas Müller to Andreas Kohlbecker
Seems to work, so we can close this ticket.
Only issue is that it is difficult to use so I wonder if we can't have a one click solution that does all this in background, if possible.
Updated by Andreas Kohlbecker almost 7 years ago
- Status changed from Feedback to Closed