[EP-tech] Problem with eprints 3.4 file restricted

[J.Salter at leeds.ac.uk (John Salter)]

One thing that might be worth checking: is the file cached?

If you:-
- downloaded it as a logged-in user
- logged out
- revisited the URL for the document
it would look like you can access it when you shouldn't be able to - as your browser has cached it.

For PDFs, it can be tricky to force the browser to reload the file - I find the easiest way to do this is to append a query-sting to the document URL:
https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fyour.repo%2F1234%2F1%2Fdocument.pdf&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C23e1af2bd96c4933841108d823e34ac0%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=XqS099OS6JgXBiaNVR9YZQUVFuhLrSOOYdtMCrhuPtw%3D&reserved=0 -> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fyour.repo%2F1234%2F1%2Fdocument.pdf%3Fa&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C23e1af2bd96c4933841108d823e34ac0%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=6wQOR%2F7wRkEMqCfUVjfRdT96o46NcWW7Qp2IAfcz2zc%3D&reserved=0

This doesn't cause EPrints to do anything different, but the browser sees it as a different document and will try to download it again.

Cheers,
John

From: eprints-tech-bounces at ecs.soton.ac.uk [mailto:eprints-tech-bounces at ecs.soton.ac.uk] On Behalf Of David R Newman via Eprints-tech
Sent: 09 July 2020 09:13
To: eprints-tech at ecs.soton.ac.uk; Ajunk Pracetio <prazetyo at gmail.com>
Subject: Re: [EP-tech] Problem with eprints 3.4 file restricted


Hi Agung Prasetyo W.,

Please could you give a bit more detail.  Is this 3.4 install a new install or an upgrade from EPrints 3.3?  If so you may still have an old cfg/cfg.d/security.pl at the archive level that looks up the IP address in a no longer supported way, which causes access restriction to break.  I can see that you have read the GitHub issue that looks to be relate to a similar issue.  So I am guessing you will have already checked this file.

I have not seen this issue with any vanilla installs of EPrints 3.4.  Is the version of EPrints 3.4 you have installed 3.4.0 or 3.4.1?  Is it a zero install or a publication (pub_lib) flavour?  If you want to privately send me the link to the publication that has a downloadable file that should be restricted this may help be get a better idea of what is going wrong.

Regards

David Newman
On 09/07/2020 08:59, Ajunk Pracetio via Eprints-tech wrote:
Why is my eprints 3.4 when my document is restricted to user only, can still be downloaded.

I have also read https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints%2Fissues%2F322&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C23e1af2bd96c4933841108d823e34ac0%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=wCmfL%2B%2FfYJmragAZxr2F5UVq3xIhkNa2%2BPWilUL1UVQ%3D&amp;reserved=0<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints%2Fissues%2F322&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C23e1af2bd96c4933841108d823e34ac0%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=wCmfL%2B%2FfYJmragAZxr2F5UVq3xIhkNa2%2BPWilUL1UVQ%3D&amp;reserved=0> and configured the suggested files, but the files can still be downloaded.

Please help.

Regards,
Agung Prasetyo W.



*** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech

*** Archive: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C23e1af2bd96c4933841108d823e34ac0%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=ndgeCjyvUMeKbNtI0ygghmJKswXH8sTdOf%2BcVyZUHWo%3D&amp;reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C23e1af2bd96c4933841108d823e34ac0%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=ndgeCjyvUMeKbNtI0ygghmJKswXH8sTdOf%2BcVyZUHWo%3D&amp;reserved=0>

*** EPrints community wiki: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C23e1af2bd96c4933841108d823e34ac0%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=5E5Ybdm1JQMoQLFmGCZewOaOgw390PmBWaSQ7e7tmiA%3D&amp;reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C23e1af2bd96c4933841108d823e34ac0%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=5E5Ybdm1JQMoQLFmGCZewOaOgw390PmBWaSQ7e7tmiA%3D&amp;reserved=0>

[Image removed by sender.]<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.avg.com%2Femail-signature%3Futm_medium%3Demail%26utm_source%3Dlink%26utm_campaign%3Dsig-email%26utm_content%3Demailclient&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C23e1af2bd96c4933841108d823e34ac0%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=liIU%2BJqBzgyjg7xrA57ImSlEWuzvx09BsNpyF8rmgjA%3D&amp;reserved=0>
Virus-free. https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.avg.com%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C23e1af2bd96c4933841108d823e34ac0%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=CDpkX3KzlDP9d%2FGlD%2FzgGr0cHTsIRWjAL2NWpwMNXjk%3D&amp;reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.avg.com%2Femail-signature%3Futm_medium%3Demail%26utm_source%3Dlink%26utm_campaign%3Dsig-email%26utm_content%3Demailclient&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C23e1af2bd96c4933841108d823e34ac0%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=liIU%2BJqBzgyjg7xrA57ImSlEWuzvx09BsNpyF8rmgjA%3D&amp;reserved=0>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/eprints-tech/attachments/20200709/69bce7ca/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 350 bytes
Desc: image001.jpg
Url : http://mailman.ecs.soton.ac.uk/pipermail/eprints-tech/attachments/20200709/69bce7ca/attachment-0001.jpg