EPrints Technical Mailing List Archive

Message: #04581

< Previous (by date) | Next (by date) > | < Previous (in thread) | Next (in thread) > | Messages - Most Recent First | Threads - Most Recent First

[EP-tech] Re: [spam?] Re: file restriction eprints 3.3.14

Thank you for the clarification - I really appreciate it.  I will have to keep a careful track of the Apache version on our OS.
We have to be careful not to have embargoed documents publicly accessible, even temporarily, to be cached by search engines.

Best regards,

Tomasz


-----Original Message-----
From: eprints-tech-bounces@ecs.soton.ac.uk [mailto:eprints-tech-bounces@ecs.soton.ac.uk] On Behalf Of Leonardo Mezzina
Sent: August-26-15 12:48 PM
To: eprints-tech@ecs.soton.ac.uk
Subject: [EP-tech] Re: [spam?] Re: file restriction eprints 3.3.14

Hi Tomasz,
the issue is with apache 2.4. Ubuntu 12.04 ships with apache 2.2 and

  $ip = $r->connection()->remote_ip();

is fine.


Best L.

Il 26/08/2015 18:21, Tomasz Neugebauer ha scritto:
> I was just looking at the security.pl file as well, because the file has changed since 3.2.4 - and now, in 3.3.12, there is a cookie based ALLOW for the request a copy button email "Go to document" links (which were failing for us because we were using an older cfg.d/security file)  I moved the cookie based ALLOW code from defaultcfg/security.pl and that solved the issue.
>
> We are running 3.3.12 on Ubuntu 12.04
> Our defaultcfg/cfg.d/security.pl file has this:
>
> my $ip = $r->connection()->remote_ip();
>
> And that seems to work fine, the embargoed documents are not public.
> So it looks like the issue reported below begins sometime after 3.3.12?
>
> Tomasz
>
>
> -----Original Message-----
> From: eprints-tech-bounces@ecs.soton.ac.uk 
> [mailto:eprints-tech-bounces@ecs.soton.ac.uk] On Behalf Of alen 
> vodopijevec
> Sent: August-25-15 3:05 PM
> To: eprints-tech@ecs.soton.ac.uk
> Subject: [EP-tech] Re: [spam?] Re: file restriction eprints 3.3.14
>
> Glad it was helpfull :) .. I think that it would be useful if you put a comment with your solution on github too.
>
> Regards,
> Alen
> --
> http://fulir.irb.hr
>
>
>
> On 08/25/2015 08:15 PM, Leonardo Mezzina wrote:
>> Thank you Alen for pointing out the issue for me, I worked a long 
>> long time ago with security.pl and I almost forgot its existence. By 
>> the way I just copied the default security.pl in the lib folder, the 
>> method used there to retrieve the ip seems working.
>>
>>     my $ip = $doc->repository->remote_ip();
>>
>> Best, L.
>>
>> Il 25/08/2015 18:00, alen vodopijevec ha scritto:
>>> Hi!
>>>
>>> There is an issue submited (with a temporary fix) here:
>>> https://github.com/eprints/eprints/issues/322
>>>
>>> Regards,
>>> --
>>> alen
>>>
>>> On 08/25/2015 12:43 PM, Leonardo Mezzina wrote:
>>>> Hello everyone,
>>>> I just upgraded Eprints 3.3.11 on Ubuntu 12.04 to eprints 3.3.14 on 
>>>> Ubuntu 14.04. Everything is working but the file restriction. In 
>>>> fact, Eprints allow the public download of  attached documents to 
>>>> an eprint publication even if it the docu ments are restricted. The 
>>>> template for rendering document correctly recognize the 
>>>> restriction.
>>>> I am wondering if there are some issue with Apache 2.4 and the 
>>>> restriction mechanism? Anyone experienced something similar?
>>>>
>>>> Thanks! Leonardo
>>>>
>>>>
>>> *** Options:
>>> http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
>>> *** Archive: http://www.eprints.org/tech.php/
>>> *** EPrints community wiki: http://wiki.eprints.org/
>>> *** EPrints developers Forum: http://forum.eprints.org/
>>
> *** Options: 
> http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
> *** Archive: http://www.eprints.org/tech.php/
> *** EPrints community wiki: http://wiki.eprints.org/
> *** EPrints developers Forum: http://forum.eprints.org/
>
> *** Options: 
> http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
> *** Archive: http://www.eprints.org/tech.php/
> *** EPrints community wiki: http://wiki.eprints.org/
> *** EPrints developers Forum: http://forum.eprints.org/


--
Leonardo Mezzina
Responsabile Ufficio infrastrutture,
servizi informatici e amministrazione digitale IMT Institute for Advanced Studies Lucca Piazza San Ponziano, 6
55100 Lucca - Italy
Tel: +39 0583 4326 586
Fax: +39 0583 4326 565

*** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
*** Archive: http://www.eprints.org/tech.php/
*** EPrints community wiki: http://wiki.eprints.org/
*** EPrints developers Forum: http://forum.eprints.org/