[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[EP-tech] Request copy - PIN security
- Subject: [EP-tech] Request copy - PIN security
- From: drn at ecs.soton.ac.uk (David R Newman)
- Date: Mon, 12 Sep 2022 21:40:09 +0100
- In-reply-to: <CAMj=pgddTVvMJD5-_585Ez5pTJk=_Cr6TBO+NmPJaSnAsJz1GQ@mail.gmail.com>
- References: <CAMj=pgenR1oG5=JDH_eC_m3jnyN2Jx2u2cErWaLMPZGn=o3xsw@mail.gmail.com> <bf0324a7-80e0-a0e5-b950-36cae4cd5af2@ecs.soton.ac.uk> <CAMj=pgddTVvMJD5-_585Ez5pTJk=_Cr6TBO+NmPJaSnAsJz1GQ@mail.gmail.com> <CAMj=pgddTVvMJD5-_585Ez5pTJk=_Cr6TBO+NmPJaSnAsJz1GQ@mail.gmail.com> <435e692c-a3cc-f02a-c8e5-54a9ce115251@ecs.soton.ac.uk>
Hi Luc,
It looks like the PIN security was added to 3.3 post the fork to create
the initial 3.4 codebase, so the PIN security code never got added to
3.4.? I have created the following issue to look into porting this into
the next release of EPrints 3.4:
https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints3.4%2Fissues%2F245&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133676566%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=mzTg6UhZ29rLupF5l9yOkA7HdHCOnmu5XxK8N5nvC28%3D&reserved=0
It may be possible to write a patch that can be deployed at an archive
level so you can use this prior to the next release of EPrints 3.4.
Regards
David Newman
On 12/09/2022 5:34 pm, Luc Charron via Eprints-tech wrote:
> *CAUTION:* This e-mail originated outside the University of Southampton.
> Hi,
>
> There's a mention at lines 70+ of
> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints%2Fblob%2F3.3%2Flib%2Fdefaultcfg%2Fcfg.d%2Frequest_copy.pl&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133676566%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=CB0fyQcOOr0b1V1UlTU8NBorPW%2BsntYkyNn7t3uG4RE%3D&reserved=0
> <https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints%2Fblob%2F3.3%2Flib%2Fdefaultcfg%2Fcfg.d%2Frequest_copy.pl&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133676566%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=CB0fyQcOOr0b1V1UlTU8NBorPW%2BsntYkyNn7t3uG4RE%3D&reserved=0>
>
>
> Here at lines 123 & ~170+
> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints%2Fblob%2F49315a7bd4d9a471978c7d781de798ad7ba9352a%2Fperl_lib%2FEPrints%2FPlugin%2FScreen%2FPublic%2FRequestCopy.pm&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=DkLxDrzkr3BFQsnTImaGzxAEccMYnPz%2BdDxvxZiWl5Y%3D&reserved=0
> <https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints%2Fblob%2F49315a7bd4d9a471978c7d781de798ad7ba9352a%2Fperl_lib%2FEPrints%2FPlugin%2FScreen%2FPublic%2FRequestCopy.pm&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=DkLxDrzkr3BFQsnTImaGzxAEccMYnPz%2BdDxvxZiWl5Y%3D&reserved=0>
>
> In our older version (3.3.16), the PIN is built in the link.
>
> I do not see any reference to this in
> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints3.4%2Fblob%2F6f83a78eb738fbd88b3816fc97ffecaf43bf811d%2Fperl_lib%2FEPrints%2FPlugin%2FScreen%2FPublic%2FRequestCopy.pm&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=2QPFZWDGhl%2B0K%2BWAPLr0f2yWZtUtlzHko0G2%2FNlkvIQ%3D&reserved=0
> <https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints3.4%2Fblob%2F6f83a78eb738fbd88b3816fc97ffecaf43bf811d%2Fperl_lib%2FEPrints%2FPlugin%2FScreen%2FPublic%2FRequestCopy.pm&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=2QPFZWDGhl%2B0K%2BWAPLr0f2yWZtUtlzHko0G2%2FNlkvIQ%3D&reserved=0>
>
>
> Thanks,
>
> Luc
>
> Le lun. 12 sept. 2022, ? 11 h 33, David R Newman <drn at ecs.soton.ac.uk>
> a ?crit?:
>
> Hi Luc,
>
> I am not exactly sure what you mean by PIN security? Maybe your
> older version of EPrints gave you a generic URL you could go to
> and then type in the PIN to access the document whereas more
> recent versions of EPrints build that PIN into the URL that allows
> you to access the document (on a temporary basis), so you don't
> need to type in the PIN?
>
> Please could you either send me a screenshot of how this PIN
> security currently works for you in your old version of EPrints or
> point me at the code that provides PIN security in the EPrints
> legacy (3.3) codebase at:
>
> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=7PGKVyzlzbUk%2Fo3fom2nHmLbEt7tz7%2F4o%2FrOim6rzJE%3D&reserved=0
> <https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=7PGKVyzlzbUk%2Fo3fom2nHmLbEt7tz7%2F4o%2FrOim6rzJE%3D&reserved=0>
>
> Regards
>
> David Newman
>
> On 12/09/2022 14:57, Luc Charron via Eprints-tech wrote:
>> *CAUTION:* This e-mail originated outside the University of
>> Southampton.
>> Hi,
>>
>> I'm looking at the request copy functionnality in 3.4.x and the
>> PIN security seems to have been removed.
>>
>> I tried to find information about this removal but I cannot find
>> anything about it. Is there a new way to do this?
>>
>> Thanks,
>>
>> Luc
>>
>> *** Options:http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
>> *** Archive:https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Unh9m0NC0IXOTw9r0yEIwcuiUO5HeZwbioLyZHh%2BvRk%3D&reserved=0 <https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Unh9m0NC0IXOTw9r0yEIwcuiUO5HeZwbioLyZHh%2BvRk%3D&reserved=0>
>> *** EPrints community wiki:https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=RAMZ9o5iHZOBdEZaWnofTqe3Te5UBkzphgRNKIRxei0%3D&reserved=0 <https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=RAMZ9o5iHZOBdEZaWnofTqe3Te5UBkzphgRNKIRxei0%3D&reserved=0>
>
>
> *** Options:http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
> *** Archive:https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Unh9m0NC0IXOTw9r0yEIwcuiUO5HeZwbioLyZHh%2BvRk%3D&reserved=0
> *** EPrints community wiki:https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C921d548bbd97410d916808da94fefd90%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637986120133832807%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=RAMZ9o5iHZOBdEZaWnofTqe3Te5UBkzphgRNKIRxei0%3D&reserved=0
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/eprints-tech/attachments/20220912/a215f6d9/attachment-0001.html