[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[EP-tech] Request copy - PIN security



Hi Luc,

It looks like the PIN security was added to 3.3 post the fork to create 
the initial 3.4 codebase, so the PIN security code never got added to 
3.4.? I have created the following issue to look into porting this into 
the next release of EPrints 3.4:

https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints3.4%2Fissues%2F245&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133676566%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=mzTg6UhZ29rLupF5l9yOkA7HdHCOnmu5XxK8N5nvC28%3D&reserved=0

It may be possible to write a patch that can be deployed at an archive 
level so you can use this prior to the next release of EPrints 3.4.

Regards

David Newman

On 12/09/2022 5:34 pm, Luc Charron via Eprints-tech wrote:
> *CAUTION:* This e-mail originated outside the University of Southampton.
> Hi,
>
> There's a mention at lines 70+ of
> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints%2Fblob%2F3.3%2Flib%2Fdefaultcfg%2Fcfg.d%2Frequest_copy.pl&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133676566%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=CB0fyQcOOr0b1V1UlTU8NBorPW%2BsntYkyNn7t3uG4RE%3D&reserved=0 
> <https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints%2Fblob%2F3.3%2Flib%2Fdefaultcfg%2Fcfg.d%2Frequest_copy.pl&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133676566%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=CB0fyQcOOr0b1V1UlTU8NBorPW%2BsntYkyNn7t3uG4RE%3D&amp;reserved=0> 
>
>
> Here at lines 123 & ~170+
> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints%2Fblob%2F49315a7bd4d9a471978c7d781de798ad7ba9352a%2Fperl_lib%2FEPrints%2FPlugin%2FScreen%2FPublic%2FRequestCopy.pm&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=DkLxDrzkr3BFQsnTImaGzxAEccMYnPz%2BdDxvxZiWl5Y%3D&amp;reserved=0 
> <https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints%2Fblob%2F49315a7bd4d9a471978c7d781de798ad7ba9352a%2Fperl_lib%2FEPrints%2FPlugin%2FScreen%2FPublic%2FRequestCopy.pm&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=DkLxDrzkr3BFQsnTImaGzxAEccMYnPz%2BdDxvxZiWl5Y%3D&amp;reserved=0>
>
> In our older version (3.3.16), the PIN is built in the link.
>
> I do not see any reference to this in 
> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints3.4%2Fblob%2F6f83a78eb738fbd88b3816fc97ffecaf43bf811d%2Fperl_lib%2FEPrints%2FPlugin%2FScreen%2FPublic%2FRequestCopy.pm&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=2QPFZWDGhl%2B0K%2BWAPLr0f2yWZtUtlzHko0G2%2FNlkvIQ%3D&amp;reserved=0 
> <https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints3.4%2Fblob%2F6f83a78eb738fbd88b3816fc97ffecaf43bf811d%2Fperl_lib%2FEPrints%2FPlugin%2FScreen%2FPublic%2FRequestCopy.pm&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=2QPFZWDGhl%2B0K%2BWAPLr0f2yWZtUtlzHko0G2%2FNlkvIQ%3D&amp;reserved=0> 
>
>
> Thanks,
>
> Luc
>
> Le lun. 12 sept. 2022, ? 11 h 33, David R Newman <drn at ecs.soton.ac.uk> 
> a ?crit?:
>
>     Hi Luc,
>
>     I am not exactly sure what you mean by PIN security? Maybe your
>     older version of EPrints gave you a generic URL you could go to
>     and then type in the PIN to access the document whereas more
>     recent versions of EPrints build that PIN into the URL that allows
>     you to access the document (on a temporary basis), so you don't
>     need to type in the PIN?
>
>     Please could you either send me a screenshot of how this PIN
>     security currently works for you in your old version of EPrints or
>     point me at the code that provides PIN security in the EPrints
>     legacy (3.3) codebase at:
>
>     https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=7PGKVyzlzbUk%2Fo3fom2nHmLbEt7tz7%2F4o%2FrOim6rzJE%3D&amp;reserved=0
>     <https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=7PGKVyzlzbUk%2Fo3fom2nHmLbEt7tz7%2F4o%2FrOim6rzJE%3D&amp;reserved=0>
>
>     Regards
>
>     David Newman
>
>     On 12/09/2022 14:57, Luc Charron via Eprints-tech wrote:
>>     *CAUTION:* This e-mail originated outside the University of
>>     Southampton.
>>     Hi,
>>
>>     I'm looking at the request copy functionnality in 3.4.x and the
>>     PIN security seems to have been removed.
>>
>>     I tried to find information about this removal but I cannot find
>>     anything about it. Is there a new way to do this?
>>
>>     Thanks,
>>
>>     Luc
>>
>>     *** Options:http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
>>     *** Archive:https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=Unh9m0NC0IXOTw9r0yEIwcuiUO5HeZwbioLyZHh%2BvRk%3D&amp;reserved=0  <https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=Unh9m0NC0IXOTw9r0yEIwcuiUO5HeZwbioLyZHh%2BvRk%3D&amp;reserved=0>
>>     *** EPrints community wiki:https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=RAMZ9o5iHZOBdEZaWnofTqe3Te5UBkzphgRNKIRxei0%3D&amp;reserved=0  <https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=RAMZ9o5iHZOBdEZaWnofTqe3Te5UBkzphgRNKIRxei0%3D&amp;reserved=0>
>
>
> *** Options:http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
> *** Archive:https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=Unh9m0NC0IXOTw9r0yEIwcuiUO5HeZwbioLyZHh%2BvRk%3D&amp;reserved=0
> *** EPrints community wiki:https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=RAMZ9o5iHZOBdEZaWnofTqe3Te5UBkzphgRNKIRxei0%3D&amp;reserved=0
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/eprints-tech/attachments/20220912/a215f6d9/attachment-0001.html