Implement Access Control #98

kylehuynh205 · 2023-07-04T17:49:44Z

About this PR:

Implement configurations for the Access control with Group
Enable private file system and switch default file system to private file system to have all assets be protected with Group
Switch derivatives actions to private file. (ie. https://islandora.traefik.me/admin/config/system/actions/configure/image_generate_a_service_file_from_an_original_file)
Add a patch to enable OpenSeadragon View include an JWT token whenever it sends a request to Cantaloupe. (Already had a PR)

Required modifications from isle-dc

Add extra steps to create a private file system directory.
- In isle-dc, download the Makefile's patch file at https://raw.githubusercontent.com/digitalutsc/override_permission_file_entity/main/Makefile_accesscontrol.patch
- Apply the patch file by patch -p1 < Makefile_accesscontrol.patch
In sample.env, please change:
- CANTALOUPE_DELEGATE_SCRIPT_ENABLED=true
- CANTALOUPE_HTTPSOURCE_LOOKUP_STRATEGY=ScriptLookupStrategy
  ==> This can prevent 403 error in OpenSeaDragon Viewer when it views an non-public image for authorized users (even with Admin users).

Modules

Islandora Group Module

Module Link: https://github.com/digitalutsc/islandora_group
Based from Danny's initial works, by tagging nodes, then it will move the node and its media into Groups, and Group will handle the access control.
this module will extend from Danny work to apply access control for node and media separately and provide an UI to move nodes and media to group(s)

Group Solr

Module Link: https://github.com/digitalutsc/group_solr
Purpose: prevent restricted node(s) not being included in Search Results and Facet results counter. This ensure the accuracy for the Advanced Search module.
Components:
- Provide a Search API processor to check access control of nodes and media with Group when being indexed to Solr.
- Provide a filter in Search API Solr based View to check the access control of node when view is loading the results in Search View: https://islandora.traefik.me/admin/structure/views/view/solr_search_content (fixed the issue with search results count in View.

Private File Adapter

Module Link: https://github.com/digitalutsc/private_files_adapter
Implement hook_file_access to check access control in private file when Drupal received the requests from Cantaloupe server.

For ingesting Sample content with Workbench

Requirements:

To ingest node and media with access control with Islandora Workbench:

After the build completed, visit https://islandora.traefik.me/admin/group and create a new Group.
In https://islandora.traefik.me/admin/structure/taxonomy/manage/islandora_access/overview, obtain the term ID
In the Spreadsheet, Add column called field_access_terms, and paste term ID of that Term associated with that newly created Group.
In Islandora Workbench workbench_utils.py, please add the follwing code after line 3165 and line 3191

                "field_access_terms": [{
                    "target_id": 55,
                    "target_type": 'taxonomy_term'
                }]

Note: Replace 55 with the tid of term associated with newly created Group

Further development

Currently derivatives are not automatically moved to the group(s) of their parent node.
Restricted content's thumbnail not loading in Mirador Thumbnail is not loading when media is in Private mode digitalutsc/islandora_mirador#8

Add Islandora Group module to composer

….yml

…ile.yml

….yml

…iginal_file.yml

…ile.yml

…sync instead

Update Main in June 15 and merge ongoing work of access control

Added Search hightlight field for search views Change Advanced Search module to the beta release

…m/digitalutsc/advanced_search/issues/33 and Islandora-Devops#96 (comment)

…starter-site into islandora_group * 'search_highlight' of github.com:kylehuynh205/islandora-starter-site: Update version of Advanced Search include fixes for https://github.com/digitalutsc/advanced_search/issues/33 and Islandora-Devops#96 (comment) Update composer.lock Enable Search hightlight settings for Search API Added Search hightlight field for search views Change Advanced Search module to the beta release Bump JWT. Update jwt # Conflicts: # composer.lock

rosiel · 2023-07-05T17:06:40Z

README.md

@@ -158,6 +158,22 @@ This should get you a starter Islandora site with:
 * RDF and JSON-LD mappings for miscellaneous entities to support storage in
 Fedora, Triplestore indexing and client requests.

+### Private file system
+
+* In Drupal container of isle-dc, create private file system directory


The Starter Site is not specific to ISLE-dc.

Will test it with playbook and isle-site-template as well.

rosiel · 2023-07-05T17:07:52Z

composer.json

+            "type": "package",
+            "package": {
+              "name": "islandora/advanced_search",
+              "version": "2.0.0-beta3",


Why specify this commit? The starter site should update with new versions (non-breaking).

rosiel · 2023-07-05T17:08:34Z

composer.json

-        "mjordan/islandora_workbench_integration": "^1.0"
+        "mjordan/islandora_workbench_integration": "^1.0",
+        "digitalutsc/group_solr": "^1.0.0-beta",
+        "digitalutsc/islandora_group": "^1.0.0-beta",


usually the syntax is @beta (2 lines)/

Fixed with the commit kylehuynh205@abc5726

kylehuynh205 · 2023-07-06T12:12:11Z

Redone with #100

kylehuynh205 and others added 30 commits May 15, 2023 14:14

Update composer.json

e7ec9f5

Add Islandora Group module to composer

Update composer.lock

ceaf482

Update composer.lock

0150a88

Update composer.lock

890a605

Update system.file.yml

2964868

Update system.action.video_generate_a_thumbnail_from_an_original_file…

3ab796a

….yml

Update system.action.video_generate_a_thumbnail_at_0_00_03.yml

9462ec9

Update system.action.video_generate_a_service_file_from_an_original_f…

22ff869

…ile.yml

Update system.action.image_generate_a_service_file_from_an_original_f…

4fc7002

…ile.yml

Update system.action.image_generate_a_thumbnail_from_an_original_file…

ac5fd7b

….yml

Update system.action.generate_a_technical_metadata_derivative.yml

bef4fa4

Update system.action.digital_document_generate_a_thumbnail_from_an_or…

168e00b

…iginal_file.yml

Update system.action.audio_generate_a_service_file_from_an_original_f…

f511307

…ile.yml

Added islandora_group_defaluts

9962b69

update core.extension.yml

5703b4e

Update core.extension.yml

b4ae060

Update islandora_group

38a0835

Add islandora_group.yml

10c75fd

Update core.extension.yml

079bd06

Update composer.lock

7726861

Update composer.lock

01c6251

Update composer.lock

33295a4

Remove islandora_group_defaults, and moved its configs to the config/…

80ebd5d

…sync instead

Update composer.lock

1e81b43

Update composer.json

8eae6f2

Update core.extension.yml

f540cb9

Update composer.lock

6bed461

Update composer.json

1eebf15

Remove jwt module

e0164d8

add jwt submodules

4b0b841

kylehuynh205 and others added 13 commits May 18, 2023 09:01

Update search_api.index.default_solr_index.yml

36f0e6e

Update views.view.solr_search_content.yml

026e734

Merge branch 'main-0615' into islandora_group

c1c71f4

Merge pull request #1 from kylehuynh205/islandora_group

9aa538a

Update Main in June 15 and merge ongoing work of access control

update composer.log

69c82da

Enable Search hightlight settings for Search API

b197228

Added Search hightlight field for search views Change Advanced Search module to the beta release

Update composer.lock

c31f335

Update version of Advanced Search include fixes for https://github.co…

2e69e88

…m/digitalutsc/advanced_search/issues/33 and Islandora-Devops#96 (comment)

enable field_access_terms to Manage Form display for Ingest

c7d9bfc

Update default_settings.txt

afc0201

Update composer.json

fb75b5c

Update configs for access control

34f2672

kylehuynh205 marked this pull request as ready for review July 4, 2023 18:30

rosiel reviewed Jul 5, 2023

View reviewed changes

Fixed for Islandora-Devops#98 (comment)

abc5726

kylehuynh205 closed this Jul 6, 2023

kylehuynh205 deleted the islandora_group branch July 6, 2023 05:09

kylehuynh205 mentioned this pull request Jul 6, 2023

Implement Access control with Group #100

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Implement Access Control #98

Implement Access Control #98

kylehuynh205 commented Jul 4, 2023 •

edited

Loading

rosiel Jul 5, 2023

kylehuynh205 Jul 5, 2023

rosiel Jul 5, 2023

rosiel Jul 5, 2023

kylehuynh205 Jul 5, 2023

kylehuynh205 commented Jul 6, 2023

Implement Access Control #98

Implement Access Control #98

Conversation

kylehuynh205 commented Jul 4, 2023 • edited Loading

About this PR:

Required modifications from isle-dc

Modules

Islandora Group Module

Group Solr

Private File Adapter

For ingesting Sample content with Workbench

Requirements:

Further development

rosiel Jul 5, 2023

Choose a reason for hiding this comment

kylehuynh205 Jul 5, 2023

Choose a reason for hiding this comment

rosiel Jul 5, 2023

Choose a reason for hiding this comment

rosiel Jul 5, 2023

Choose a reason for hiding this comment

kylehuynh205 Jul 5, 2023

Choose a reason for hiding this comment

kylehuynh205 commented Jul 6, 2023

kylehuynh205 commented Jul 4, 2023 •

edited

Loading