EPrints Technical Mailing List Archive

Message: #04578

< Previous (by date) | Next (by date) > | < Previous (in thread) | Next (in thread) > | Messages - Most Recent First | Threads - Most Recent First

[EP-tech] Re: [spam?] Re: file restriction eprints 3.3.14

I was just looking at the security.pl file as well, because the file has changed since 3.2.4 - and now, in 3.3.12, there is a cookie based ALLOW for the request a copy button email "Go to document" links (which were failing for us because we were using an older cfg.d/security file)  I moved the cookie based ALLOW code from defaultcfg/security.pl and that solved the issue.

We are running 3.3.12 on Ubuntu 12.04
Our defaultcfg/cfg.d/security.pl file has this:

my $ip = $r->connection()->remote_ip();

And that seems to work fine, the embargoed documents are not public.   
So it looks like the issue reported below begins sometime after 3.3.12?

Tomasz


-----Original Message-----
From: eprints-tech-bounces@ecs.soton.ac.uk [mailto:eprints-tech-bounces@ecs.soton.ac.uk] On Behalf Of alen vodopijevec
Sent: August-25-15 3:05 PM
To: eprints-tech@ecs.soton.ac.uk
Subject: [EP-tech] Re: [spam?] Re: file restriction eprints 3.3.14

Glad it was helpfull :) .. I think that it would be useful if you put a comment with your solution on github too.

Regards,
Alen
--
http://fulir.irb.hr



On 08/25/2015 08:15 PM, Leonardo Mezzina wrote:
> Thank you Alen for pointing out the issue for me, I worked a long long 
> time ago with security.pl and I almost forgot its existence. By the 
> way I just copied the default security.pl in the lib folder, the 
> method used there to retrieve the ip seems working.
>
>    my $ip = $doc->repository->remote_ip();
>
> Best, L.
>
> Il 25/08/2015 18:00, alen vodopijevec ha scritto:
>> Hi!
>>
>> There is an issue submited (with a temporary fix) here:
>> https://github.com/eprints/eprints/issues/322
>>
>> Regards,
>> --
>> alen
>>
>> On 08/25/2015 12:43 PM, Leonardo Mezzina wrote:
>>> Hello everyone,
>>> I just upgraded Eprints 3.3.11 on Ubuntu 12.04 to eprints 3.3.14 on 
>>> Ubuntu 14.04. Everything is working but the file restriction. In 
>>> fact, Eprints allow the public download of  attached documents to an  
>>> eprint publication even if it the docu
>
>>> ments are restricted. The template for rendering document correctly 
>>> recognize the restriction.
>>> I am wondering if there are some issue with Apache 2.4 and the 
>>> restriction mechanism? Anyone experienced something similar?
>>>
>>> Thanks! Leonardo
>>>
>>>
>> *** Options: 
>> http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
>> *** Archive: http://www.eprints.org/tech.php/
>> *** EPrints community wiki: http://wiki.eprints.org/
>> *** EPrints developers Forum: http://forum.eprints.org/
>
>
*** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
*** Archive: http://www.eprints.org/tech.php/
*** EPrints community wiki: http://wiki.eprints.org/
*** EPrints developers Forum: http://forum.eprints.org/