[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[EP-tech] Eprints-tech Digest, Vol 127, Issue 17
- Subject: [EP-tech] Eprints-tech Digest, Vol 127, Issue 17
- From: J.Salter at leeds.ac.uk (John Salter)
- Date: Fri, 12 Apr 2019 12:53:35 +0000
- In-reply-to: <EMEW3|02052fc3a952d3ab839a7531c86d75a8v3BD3j14eprints-tech-bounces|ecs.soton.ac.uk|CADC+wg7_tG9C=cP9Cwq0bM2HVvm+4hmRJV_eF6aWWCpJmQR2Gg@mail.gmail.com>
- References: <mailman.6029.1555066370.3431.eprints-tech@ecs.soton.ac.uk> <EMEW3|1fca3364f5ba0dcaf66e97a2cdabe07bv3BBr914eprints-tech-bounces|ecs.soton.ac.uk|mailman.6029.1555066370.3431.eprints-tech@ecs.soton.ac.uk> <CADC+wg7_tG9C=cP9Cwq0bM2HVvm+4hmRJV_eF6aWWCpJmQR2Gg@mail.gmail.com> <CADC+wg7_tG9C=cP9Cwq0bM2HVvm+4hmRJV_eF6aWWCpJmQR2Gg@mail.gmail.com> <EMEW3|02052fc3a952d3ab839a7531c86d75a8v3BD3j14eprints-tech-bounces|ecs.soton.ac.uk|CADC+wg7_tG9C=cP9Cwq0bM2HVvm+4hmRJV_eF6aWWCpJmQR2Gg@mail.gmail.com> <DB6PR0302MB2711913C68009D191975A112C4280@DB6PR0302MB2711.eurprd03.prod.outlook.com>
Excellent!
A question for others (possibly to David or other core-committers):
This issue has come up a few times previously on the tech-list.
It's quite a bad situation in terms of the impact of this issue.
Should we attempt to introduce a warning somehow e.g. at Apache startup, or from a 'bin/epadmin test' that warns of possibly dangerous configuration like this?
This specific issue is difficult - the repository appears to be normal - and working as expected?
Cheers,
John
From: eprints-tech-bounces at ecs.soton.ac.uk [mailto:eprints-tech-bounces at ecs.soton.ac.uk] On Behalf Of Denis Munyua via Eprints-tech
Sent: 12 April 2019 13:02
To: eprints-tech at ecs.soton.ac.uk
Subject: Re: [EP-tech] Eprints-tech Digest, Vol 127, Issue 17
Thank you,
It was broken and commenting the "$r->connection->remote_ip' line under ~/archives/[ARCHIVEID]/cfg/cfg.d/security.pl<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsecurity.pl%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=U6sfItaRvDBcD94PLx0bb2B41Jv3IP0dwa4OtYkxl6g%3D&reserved=0> fixed the issue.
Sincerely,
On Fri, Apr 12, 2019 at 1:53 PM <eprints-tech-request at ecs.soton.ac.uk<mailto:eprints-tech-request at ecs.soton.ac.uk>> wrote:
Send Eprints-tech mailing list submissions to
eprints-tech at ecs.soton.ac.uk<mailto:eprints-tech at ecs.soton.ac.uk>
To subscribe or unsubscribe via the World Wide Web, visit
http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
or, via email, send a message with subject or body 'help' to
eprints-tech-request at ecs.soton.ac.uk<mailto:eprints-tech-request at ecs.soton.ac.uk>
You can reach the person managing the list at
eprints-tech-owner at ecs.soton.ac.uk<mailto:eprints-tech-owner at ecs.soton.ac.uk>
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Eprints-tech digest..."
Today's Topics:
1. Re: Security Level (Visible to:) (Newman D.R.)
2. Re: Security Level (Visible to:) (John Salter)
----------------------------------------------------------------------
Message: 1
Date: Fri, 12 Apr 2019 10:04:43 +0000
From: "Newman D.R." <drn at ecs.soton.ac.uk<mailto:drn at ecs.soton.ac.uk>>
Subject: Re: [EP-tech] Security Level (Visible to:)
To: "eprints-tech at ecs.soton.ac.uk<mailto:eprints-tech at ecs.soton.ac.uk>" <eprints-tech at ecs.soton.ac.uk<mailto:eprints-tech at ecs.soton.ac.uk>>,
"Denis Munyua" <denis.munyua at gmail.com<mailto:denis.munyua at gmail.com>>
Message-ID:
<EMEW3|bb7e13e12db0ebda93b5f99911a1dfbav3BB4v03drn|ecs.soton.ac.uk<http://ecs.soton.ac.uk>|1555063482.3266.225.camel at ecs.soton.ac.uk<mailto:1555063482.3266.225.camel at ecs.soton.ac.uk>>
Content-Type: text/plain; charset="utf-8"
Hi Denis,
To confirm, you have been running Apache 2.4.25 (or at least some
version of 2.4) for some time prior to upgrading to EPrints to 3.3.16
and the problem with being able to access something you should not be
able to was not present directly prior to upgrading EPrints to 3.3.16?
Regards
David Newman
On Fri, 2019-04-12 at 12:28 +0300, Denis Munyua via Eprints-tech wrote:
> Hi John,
>
> Yes I upgraded from a previous version 3.3.* and this is not a cached
> copy. Am currently running:
> Apache/2.4.25 (Debian)
> Eprints 3.3.16
> Thanks,
>
> On Fri, Apr 12, 2019 at 12:10 PM <eprints-tech-request at ecs.soton.ac.u
<mailto:eprints-tech-request at ecs.soton.ac.u%0b>> k> wrote:
> > Send Eprints-tech mailing list submissions to
> > eprints-tech at ecs.soton.ac.uk<mailto:eprints-tech at ecs.soton.ac.uk>
> >
> > To subscribe or unsubscribe via the World Wide Web, visit
> > http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tec
> > h
> > or, via email, send a message with subject or body 'help' to
> > eprints-tech-request at ecs.soton.ac.uk<mailto:eprints-tech-request at ecs.soton.ac.uk>
> >
> > You can reach the person managing the list at
> > eprints-tech-owner at ecs.soton.ac.uk<mailto:eprints-tech-owner at ecs.soton.ac.uk>
> >
> > When replying, please edit your Subject line so it is more specific
> > than "Re: Contents of Eprints-tech digest..."
> >
> >
> > Today's Topics:
> >
> > 1. Re: Security Level (Visible to:) (John Salter)
> > 2. Re: Security Level (Visible to:) (Yuri)
> >
> >
> > -----------------------------------------------------------------
> > -----
> >
> > Message: 1
> > Date: Fri, 12 Apr 2019 08:58:16 +0000
> > From: John Salter <J.Salter at leeds.ac.uk<mailto:J.Salter at leeds.ac.uk>>
> > Subject: Re: [EP-tech] Security Level (Visible to:)
> > To: "eprints-tech at ecs.soton.ac.uk<mailto:eprints-tech at ecs.soton.ac.uk>" <eprints-tech at ecs.soton.ac.uk<mailto:eprints-tech at ecs.soton.ac.uk>>,
> > "Denis Munyua" <denis.munyua at gmail.com<mailto:denis.munyua at gmail.com>>
> > Message-ID:
> > <DB6PR0302MB2711A82E5F7E1E2784DD3100C4280 at DB6PR0302MB2711.e
<mailto:DB6PR0302MB2711A82E5F7E1E2784DD3100C4280 at DB6PR0302MB2711.e%0b>> > urprd03.prod.outlook.com<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Furprd03.prod.outlook.com&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=kYnttQGnpWGI2tNbEvOl7Ia%2FqjPUfl74u7wQMwsROMk%3D&reserved=0>>
> >
> > Content-Type: text/plain; charset="utf-8"
> >
> > Hi Denis,
> >
> > Which version of Apache are you running (probably 2.2 or 2.4)?
> > Which version of EPrints are you running?
> > Have you upgraded EPrints from a previous version?
> >
> > Cheers,
> > John
> >
> >
> > From: eprints-tech-bounces at ecs.soton.ac.uk<mailto:eprints-tech-bounces at ecs.soton.ac.uk> [mailto:eprints-tech-bou<mailto:eprints-tech-bou>
> > nces at ecs.soton.ac.uk<mailto:nces at ecs.soton.ac.uk>] On Behalf Of Denis Munyua via Eprints-tech
> > Sent: 12 April 2019 09:43
> > To: eprints-tech at ecs.soton.ac.uk<mailto:eprints-tech at ecs.soton.ac.uk>
> > Subject: [EP-tech] Security Level (Visible to:)
> >
> > Greetings,
> >
> > I set up a repository some time back and I noticed that even after
> > setting the security level for the [Thesis / Dissertation] to
> > [Repository Staff Only] users are still able to view and download
> > the full text.
> >
> > Please advise.
> >
> > --
> >
> > Denis Muny?a
> > P.O. Box 12510- 00100 | Nairobi, Kenya
> > Mobile: +254 720760340
> > Skype: denis.munyua
> > -------------- next part --------------
> > An HTML attachment was scrubbed...
> > URL: http://mailman.ecs.soton.ac.uk/pipermail/eprints-tech/attachme
> > nts/20190412/8137bfce/attachment-0001.html
> >
> > ------------------------------
> >
> > Message: 2
> > Date: Fri, 12 Apr 2019 11:09:49 +0200
> > From: Yuri <yurj at alfa.it<mailto:yurj at alfa.it>>
> > Subject: Re: [EP-tech] Security Level (Visible to:)
> > To: <eprints-tech at ecs.soton.ac.uk<mailto:eprints-tech at ecs.soton.ac.uk>>
> > Message-ID: <6b46a457-fa7b-6481-6754-b11bcd98081a at alfa.it<mailto:6b46a457-fa7b-6481-6754-b11bcd98081a at alfa.it>>
> > Content-Type: text/plain; charset="utf-8"; format=flowed
> >
> > It is the cache in the browser?
> >
> > Il 12/04/19 10:58, John Salter via Eprints-tech ha scritto:
> > >
> > > Hi Denis,
> > >
> > > Which version of Apache are you running (probably 2.2 or 2.4)?
> > >
> > > Which version of EPrints are you running?
> > >
> > > Have you upgraded EPrints from a previous version?
> > >
> > > Cheers,
> > >
> > > John
> > >
> > > *From:*eprints-tech-bounces at ecs.soton.ac.uk<mailto:eprints-tech-bounces at ecs.soton.ac.uk>
> > > [mailto:eprints-tech-bounces at ecs.soton.ac.uk<mailto:eprints-tech-bounces at ecs.soton.ac.uk>] *On Behalf Of
> > *Denis
> > > Munyua via Eprints-tech
> > > *Sent:* 12 April 2019 09:43
> > > *To:* eprints-tech at ecs.soton.ac.uk<mailto:eprints-tech at ecs.soton.ac.uk>
> > > *Subject:* [EP-tech] Security Level (Visible to:)
> > >
> > > Greetings,
> > >
> > > I set up a repository some time back and I noticed that even
> > after
> > > setting the security level for the [Thesis / Dissertation] to
> > > [Repository Staff Only] users are still able to view and download
> > the
> > > full text.
> > >
> > > Please advise.
> > >
> > > --
> > >
> > > Denis Muny?a
> > > P.O. Box 12510- 00100 | Nairobi, Kenya
> > > Mobile: +254 720760340
> > > Skype: denis.munyua
> > >
> > >
> > > *** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/epri
> > nts-tech
> > > *** Archive: https://eur03.safelinks.protection.outlook.com/?url=
> > http%3A%2F%2Fwww.eprints.org<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2F2Fwww.eprints.org&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=%2BjXzTW1oToGeBfSgRXiv9chuRDSLvpoy8kW72spuu6M%3D&reserved=0>%2Ftech.php%2F&data=01%7C01%7Ceprin
> > ts-
> > tech%40ecs.soton.ac.uk<http://40ecs.soton.ac.uk>%7Cd415218c525a4b96b87b08d6bf26a095%7C4a5378f
> > 929f44d3ebe89669d03ada9d8%7C0&sdata=5eRCuJUkBrHye1LeOIuuJOHRa5V
> > Q8KXpnhH%2Bh4Mu0Ac%3D&reserved=0
> > > *** EPrints community wiki: https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Feur03.safelinks.protection.ou&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=Bea2lIUpuAe66LbwdtN6gYLGm7HfSssv0riawtKtkOg%3D&reserved=0<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Feur03.safelinks.protection.ou&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=Bea2lIUpuAe66LbwdtN6gYLGm7HfSssv0riawtKtkOg%3D&reserved=0>
> > tlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=01%7C01%7C<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftlook.com%2F%3Furl%3Dhttp%253A%252F%252Fwiki.eprints.org%252F%26data%3D01%257C01%257C&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=r6glK6CDy5FbLFBvgHcb8LerAHH5qFOLfERiS%2BlFkrs%3D&reserved=0>
> > eprints-
> > tech%40ecs.soton.ac.uk<http://40ecs.soton.ac.uk>%7Cd415218c525a4b96b87b08d6bf26a095%7C4a5378f
> > 929f44d3ebe89669d03ada9d8%7C0&sdata=v%2FsHnQc%2BCdgX9o9xIrMCr2U
> > t62A%2FxlhTv%2FB8XdyB5pM%3D&reserved=0
> > > *** EPrints developers Forum: https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Feur03.safelinks.protection&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=sVXsA6gMYgx9w4KI0ilMqpuLX6N7QbxY4gbNYNggbgg%3D&reserved=0<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Feur03.safelinks.protection&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=sVXsA6gMYgx9w4KI0ilMqpuLX6N7QbxY4gbNYNggbgg%3D&reserved=0>.
> > outlook.com/?url=http%3A%2F%2Fforum.eprints.org%2F&data=01%7C01<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Foutlook.com%2F%3Furl%3Dhttp%253A%252F%252Fforum.eprints.org%252F%26data%3D01%257C01&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=XoDKFxgMQUVKNyU9NcfWRHxck8awI2E8CJ%2BjHDFTELI%3D&reserved=0>
> > %7Ceprints-
> > tech%40ecs.soton.ac.uk<http://40ecs.soton.ac.uk>%7Cd415218c525a4b96b87b08d6bf26a095%7C4a5378f
> > 929f44d3ebe89669d03ada9d8%7C0&sdata=R6hKGnEdFkMlPqvLrpn0tvhY99Z
> > mLCtfzS4RFPCemzA%3D&reserved=0
> >
> >
> >
> > ------------------------------
> >
> > _______________________________________________
> > Eprints-tech mailing list
> > Eprints-tech at ecs.soton.ac.uk<mailto:Eprints-tech at ecs.soton.ac.uk>
> > http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
> >
> >
> > End of Eprints-tech Digest, Vol 127, Issue 15
> > *********************************************
> >
>
> --
> Denis Muny?a
> P.O. Box 12510- 00100 | Nairobi, Kenya
> Mobile: +254 720760340
> Skype: denis.munyua
> *** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-
> tech
> *** Archive: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=c11feCREGA17OP0lmoYJZ2Aei2rQWCgiH39AkXHaDNA%3D&reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=c11feCREGA17OP0lmoYJZ2Aei2rQWCgiH39AkXHaDNA%3D&reserved=0>
> *** EPrints community wiki: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=u49Y5fsnHEE2ZasBRAP8B72OBbuHFnAn%2FdXfH4N%2B4vw%3D&reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=u49Y5fsnHEE2ZasBRAP8B72OBbuHFnAn%2FdXfH4N%2B4vw%3D&reserved=0>
> *** EPrints developers Forum: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fforum.eprints.org%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=x4GDnoi%2BcR203dk1fshCgNosOwgnihYhQIQ6G9bBsIw%3D&reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fforum.eprints.org%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=x4GDnoi%2BcR203dk1fshCgNosOwgnihYhQIQ6G9bBsIw%3D&reserved=0>
------------------------------
Message: 2
Date: Fri, 12 Apr 2019 10:52:41 +0000
From: John Salter <J.Salter at leeds.ac.uk<mailto:J.Salter at leeds.ac.uk>>
Subject: Re: [EP-tech] Security Level (Visible to:)
To: "eprints-tech at ecs.soton.ac.uk<mailto:eprints-tech at ecs.soton.ac.uk>" <eprints-tech at ecs.soton.ac.uk<mailto:eprints-tech at ecs.soton.ac.uk>>,
"Newman D.R." <drn at ecs.soton.ac.uk<mailto:drn at ecs.soton.ac.uk>>, "Denis Munyua"
<denis.munyua at gmail.com<mailto:denis.munyua at gmail.com>>
Message-ID:
<DB6PR0302MB27114368373B6EAF3630F474C4280 at DB6PR0302MB2711.eurprd03.prod.outlook.com<mailto:DB6PR0302MB27114368373B6EAF3630F474C4280 at DB6PR0302MB2711.eurprd03.prod.outlook.com>>
Content-Type: text/plain; charset="utf-8"
Hi Denis,
You should take a look at you file:
~/archives/[ARCHIVEID]/cfg/cfg.d/security.pl<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsecurity.pl&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=WdSY7yaeDFLNQuTnogs3C5MD8DU7ga5F%2FNVLNpf6WcQ%3D&reserved=0>
And compare it with:
~/lib/defaultcfg/cfg.d/security.pl<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsecurity.pl&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=WdSY7yaeDFLNQuTnogs3C5MD8DU7ga5F%2FNVLNpf6WcQ%3D&reserved=0>
If in your archive copy of security.pl<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsecurity.pl&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=WdSY7yaeDFLNQuTnogs3C5MD8DU7ga5F%2FNVLNpf6WcQ%3D&reserved=0> you have a reference to:
$r->connection->remote_ip
Under Apache 2.4, it will be broken.
This explains it: https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints%2Fissues%2F214&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=pfApqCezL7RePp0wTNdfC6gPsNF%2FqygHXR%2BoZd7EuIw%3D&reserved=0<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints%2Fissues%2F214&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=pfApqCezL7RePp0wTNdfC6gPsNF%2FqygHXR%2BoZd7EuIw%3D&reserved=0>
Let me know if you need more help!
Cheers,
John
-----Original Message-----
From: eprints-tech-bounces at ecs.soton.ac.uk<mailto:eprints-tech-bounces at ecs.soton.ac.uk> [mailto:eprints-tech-bounces at ecs.soton.ac.uk<mailto:eprints-tech-bounces at ecs.soton.ac.uk>] On Behalf Of Newman D.R. via Eprints-tech
Sent: 12 April 2019 11:05
To: eprints-tech at ecs.soton.ac.uk<mailto:eprints-tech at ecs.soton.ac.uk>; Denis Munyua <denis.munyua at gmail.com<mailto:denis.munyua at gmail.com>>
Subject: Re: [EP-tech] Security Level (Visible to:)
Hi Denis,
To confirm, you have been running Apache 2.4.25 (or at least some
version of 2.4) for some time prior to upgrading to EPrints to 3.3.16
and the problem with being able to access something you should not be
able to was not present directly prior to upgrading EPrints to 3.3.16?
Regards
David Newman
On Fri, 2019-04-12 at 12:28 +0300, Denis Munyua via Eprints-tech wrote:
> Hi John,
>
> Yes I upgraded from a previous version 3.3.* and this is not a cached
> copy. Am currently running:
> Apache/2.4.25 (Debian)
> Eprints 3.3.16
> Thanks,
>
> On Fri, Apr 12, 2019 at 12:10 PM <eprints-tech-request at ecs.soton.ac.u
<mailto:eprints-tech-request at ecs.soton.ac.u%0b>> k> wrote:
> > Send Eprints-tech mailing list submissions to
> > eprints-tech at ecs.soton.ac.uk<mailto:eprints-tech at ecs.soton.ac.uk>
> >
> > To subscribe or unsubscribe via the World Wide Web, visit
> > http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tec
> > h
> > or, via email, send a message with subject or body 'help' to
> > eprints-tech-request at ecs.soton.ac.uk<mailto:eprints-tech-request at ecs.soton.ac.uk>
> >
> > You can reach the person managing the list at
> > eprints-tech-owner at ecs.soton.ac.uk<mailto:eprints-tech-owner at ecs.soton.ac.uk>
> >
> > When replying, please edit your Subject line so it is more specific
> > than "Re: Contents of Eprints-tech digest..."
> >
> >
> > Today's Topics:
> >
> > 1. Re: Security Level (Visible to:) (John Salter)
> > 2. Re: Security Level (Visible to:) (Yuri)
> >
> >
> > -----------------------------------------------------------------
> > -----
> >
> > Message: 1
> > Date: Fri, 12 Apr 2019 08:58:16 +0000
> > From: John Salter <J.Salter at leeds.ac.uk<mailto:J.Salter at leeds.ac.uk>>
> > Subject: Re: [EP-tech] Security Level (Visible to:)
> > To: "eprints-tech at ecs.soton.ac.uk<mailto:eprints-tech at ecs.soton.ac.uk>" <eprints-tech at ecs.soton.ac.uk<mailto:eprints-tech at ecs.soton.ac.uk>>,
> > "Denis Munyua" <denis.munyua at gmail.com<mailto:denis.munyua at gmail.com>>
> > Message-ID:
> > <DB6PR0302MB2711A82E5F7E1E2784DD3100C4280 at DB6PR0302MB2711.e
<mailto:DB6PR0302MB2711A82E5F7E1E2784DD3100C4280 at DB6PR0302MB2711.e%0b>> > urprd03.prod.outlook.com<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Furprd03.prod.outlook.com&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=kYnttQGnpWGI2tNbEvOl7Ia%2FqjPUfl74u7wQMwsROMk%3D&reserved=0>>
> >
> > Content-Type: text/plain; charset="utf-8"
> >
> > Hi Denis,
> >
> > Which version of Apache are you running (probably 2.2 or 2.4)?
> > Which version of EPrints are you running?
> > Have you upgraded EPrints from a previous version?
> >
> > Cheers,
> > John
> >
> >
> > From: eprints-tech-bounces at ecs.soton.ac.uk<mailto:eprints-tech-bounces at ecs.soton.ac.uk> [mailto:eprints-tech-bou<mailto:eprints-tech-bou>
> > nces at ecs.soton.ac.uk<mailto:nces at ecs.soton.ac.uk>] On Behalf Of Denis Munyua via Eprints-tech
> > Sent: 12 April 2019 09:43
> > To: eprints-tech at ecs.soton.ac.uk<mailto:eprints-tech at ecs.soton.ac.uk>
> > Subject: [EP-tech] Security Level (Visible to:)
> >
> > Greetings,
> >
> > I set up a repository some time back and I noticed that even after
> > setting the security level for the [Thesis / Dissertation] to
> > [Repository Staff Only] users are still able to view and download
> > the full text.
> >
> > Please advise.
> >
> > --
> >
> > Denis Muny?a
> > P.O. Box 12510- 00100 | Nairobi, Kenya
> > Mobile: +254 720760340
> > Skype: denis.munyua
> > -------------- next part --------------
> > An HTML attachment was scrubbed...
> > URL: http://mailman.ecs.soton.ac.uk/pipermail/eprints-tech/attachme
> > nts/20190412/8137bfce/attachment-0001.html
> >
> > ------------------------------
> >
> > Message: 2
> > Date: Fri, 12 Apr 2019 11:09:49 +0200
> > From: Yuri <yurj at alfa.it<mailto:yurj at alfa.it>>
> > Subject: Re: [EP-tech] Security Level (Visible to:)
> > To: <eprints-tech at ecs.soton.ac.uk<mailto:eprints-tech at ecs.soton.ac.uk>>
> > Message-ID: <6b46a457-fa7b-6481-6754-b11bcd98081a at alfa.it<mailto:6b46a457-fa7b-6481-6754-b11bcd98081a at alfa.it>>
> > Content-Type: text/plain; charset="utf-8"; format=flowed
> >
> > It is the cache in the browser?
> >
> > Il 12/04/19 10:58, John Salter via Eprints-tech ha scritto:
> > >
> > > Hi Denis,
> > >
> > > Which version of Apache are you running (probably 2.2 or 2.4)?
> > >
> > > Which version of EPrints are you running?
> > >
> > > Have you upgraded EPrints from a previous version?
> > >
> > > Cheers,
> > >
> > > John
> > >
> > > *From:*eprints-tech-bounces at ecs.soton.ac.uk<mailto:eprints-tech-bounces at ecs.soton.ac.uk>
> > > [mailto:eprints-tech-bounces at ecs.soton.ac.uk<mailto:eprints-tech-bounces at ecs.soton.ac.uk>] *On Behalf Of
> > *Denis
> > > Munyua via Eprints-tech
> > > *Sent:* 12 April 2019 09:43
> > > *To:* eprints-tech at ecs.soton.ac.uk<mailto:eprints-tech at ecs.soton.ac.uk>
> > > *Subject:* [EP-tech] Security Level (Visible to:)
> > >
> > > Greetings,
> > >
> > > I set up a repository some time back and I noticed that even
> > after
> > > setting the security level for the [Thesis / Dissertation] to
> > > [Repository Staff Only] users are still able to view and download
> > the
> > > full text.
> > >
> > > Please advise.
> > >
> > > --
> > >
> > > Denis Muny?a
> > > P.O. Box 12510- 00100 | Nairobi, Kenya
> > > Mobile: +254 720760340
> > > Skype: denis.munyua
> > >
> > >
> > > *** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/epri
> > nts-tech
> > > *** Archive: https://eur03.safelinks.protection.outlook.com/?url=
> > http%3A%2F%2Fwww.eprints.org<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2F2Fwww.eprints.org&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=%2BjXzTW1oToGeBfSgRXiv9chuRDSLvpoy8kW72spuu6M%3D&reserved=0>%2Ftech.php%2F&data=01%7C01%7Ceprin
> > ts-
> > tech%40ecs.soton.ac.uk<http://40ecs.soton.ac.uk>%7Cd415218c525a4b96b87b08d6bf26a095%7C4a5378f
> > 929f44d3ebe89669d03ada9d8%7C0&sdata=5eRCuJUkBrHye1LeOIuuJOHRa5V
> > Q8KXpnhH%2Bh4Mu0Ac%3D&reserved=0
> > > *** EPrints community wiki: https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Feur03.safelinks.protection.ou&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=Bea2lIUpuAe66LbwdtN6gYLGm7HfSssv0riawtKtkOg%3D&reserved=0<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Feur03.safelinks.protection.ou&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=Bea2lIUpuAe66LbwdtN6gYLGm7HfSssv0riawtKtkOg%3D&reserved=0>
> > tlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=01%7C01%7C<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftlook.com%2F%3Furl%3Dhttp%253A%252F%252Fwiki.eprints.org%252F%26data%3D01%257C01%257C&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=r6glK6CDy5FbLFBvgHcb8LerAHH5qFOLfERiS%2BlFkrs%3D&reserved=0>
> > eprints-
> > tech%40ecs.soton.ac.uk<http://40ecs.soton.ac.uk>%7Cd415218c525a4b96b87b08d6bf26a095%7C4a5378f
> > 929f44d3ebe89669d03ada9d8%7C0&sdata=v%2FsHnQc%2BCdgX9o9xIrMCr2U
> > t62A%2FxlhTv%2FB8XdyB5pM%3D&reserved=0
> > > *** EPrints developers Forum: https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Feur03.safelinks.protection&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=sVXsA6gMYgx9w4KI0ilMqpuLX6N7QbxY4gbNYNggbgg%3D&reserved=0<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Feur03.safelinks.protection&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=sVXsA6gMYgx9w4KI0ilMqpuLX6N7QbxY4gbNYNggbgg%3D&reserved=0>.
> > outlook.com/?url=http%3A%2F%2Fforum.eprints.org%2F&data=01%7C01<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Foutlook.com%2F%3Furl%3Dhttp%253A%252F%252Fforum.eprints.org%252F%26data%3D01%257C01&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=XoDKFxgMQUVKNyU9NcfWRHxck8awI2E8CJ%2BjHDFTELI%3D&reserved=0>
> > %7Ceprints-
> > tech%40ecs.soton.ac.uk<http://40ecs.soton.ac.uk>%7Cd415218c525a4b96b87b08d6bf26a095%7C4a5378f
> > 929f44d3ebe89669d03ada9d8%7C0&sdata=R6hKGnEdFkMlPqvLrpn0tvhY99Z
> > mLCtfzS4RFPCemzA%3D&reserved=0
> >
> >
> >
> > ------------------------------
> >
> > _______________________________________________
> > Eprints-tech mailing list
> > Eprints-tech at ecs.soton.ac.uk<mailto:Eprints-tech at ecs.soton.ac.uk>
> > http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
> >
> >
> > End of Eprints-tech Digest, Vol 127, Issue 15
> > *********************************************
> >
>
> --
> Denis Muny?a
> P.O. Box 12510- 00100 | Nairobi, Kenya
> Mobile: +254 720760340
> Skype: denis.munyua
> *** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-
> tech
> *** Archive: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=c11feCREGA17OP0lmoYJZ2Aei2rQWCgiH39AkXHaDNA%3D&reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=c11feCREGA17OP0lmoYJZ2Aei2rQWCgiH39AkXHaDNA%3D&reserved=0>
> *** EPrints community wiki: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=u49Y5fsnHEE2ZasBRAP8B72OBbuHFnAn%2FdXfH4N%2B4vw%3D&reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=u49Y5fsnHEE2ZasBRAP8B72OBbuHFnAn%2FdXfH4N%2B4vw%3D&reserved=0>
> *** EPrints developers Forum: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fforum.eprints.org%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=x4GDnoi%2BcR203dk1fshCgNosOwgnihYhQIQ6G9bBsIw%3D&reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fforum.eprints.org%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=x4GDnoi%2BcR203dk1fshCgNosOwgnihYhQIQ6G9bBsIw%3D&reserved=0>
*** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
*** Archive: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=c11feCREGA17OP0lmoYJZ2Aei2rQWCgiH39AkXHaDNA%3D&reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=c11feCREGA17OP0lmoYJZ2Aei2rQWCgiH39AkXHaDNA%3D&reserved=0>
*** EPrints community wiki: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=u49Y5fsnHEE2ZasBRAP8B72OBbuHFnAn%2FdXfH4N%2B4vw%3D&reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=u49Y5fsnHEE2ZasBRAP8B72OBbuHFnAn%2FdXfH4N%2B4vw%3D&reserved=0>
*** EPrints developers Forum: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fforum.eprints.org%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=x4GDnoi%2BcR203dk1fshCgNosOwgnihYhQIQ6G9bBsIw%3D&reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fforum.eprints.org%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=x4GDnoi%2BcR203dk1fshCgNosOwgnihYhQIQ6G9bBsIw%3D&reserved=0>
------------------------------
_______________________________________________
Eprints-tech mailing list
Eprints-tech at ecs.soton.ac.uk<mailto:Eprints-tech at ecs.soton.ac.uk>
http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
End of Eprints-tech Digest, Vol 127, Issue 17
*********************************************
--
Denis Muny?a
P.O. Box 12510- 00100 | Nairobi, Kenya
Mobile: +254 720760340
Skype: denis.munyua
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/eprints-tech/attachments/20190412/63395c9d/attachment-0001.html