Cookies and dataverse 4.5.1

60 views
Skip to first unread message

Michel Bamouni

unread,
Feb 1, 2018, 10:02:18 AM2/1/18
to Dataverse Users Community
Hello,

I want to know if dataverse use cookie to gather user data?
If true does dataverse store these data? To finish, how can set the storage duration?

Best regards,

Michel

Philip Durbin

unread,
Feb 1, 2018, 11:04:20 AM2/1/18
to dataverse...@googlegroups.com
Yep, the main cookie is called "JSESSIONID" ("J" for Java since this is a Java web thing) as in the attached screenshot. If you use Shibboleth/SAML, there's an extra cookie called "_saml_idp" that remembers the last three institutions you used to log in. Shib can also have an extra cookie called "_check_is_passive_dv" if you use the ":ShibPassiveLoginEnabled" setting: http://guides.dataverse.org/en/4.8.5/installation/config.html#shibpassiveloginenabled

I wouldn't say these cookies are used to gather user data. HTTP is stateless so they keep your browser logged Dataverse.

https://github.com/IQSS/dataverse/issues/52 was sort of about cookies and session expiration but I don't think we document anything about storage duration and I'm not sure how to change it. Is there a specific problem you're having?

I hope this helps,

Phil
 

--
You received this message because you are subscribed to the Google Groups "Dataverse Users Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dataverse-community+unsub...@googlegroups.com.
To post to this group, send email to dataverse-community@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/dataverse-community/596f7685-c0fb-47d8-b8d1-b70fe09bdd15%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.



--
Screen Shot 2018-02-01 at 10.52.53 AM.png

Pete Meyer

unread,
Feb 1, 2018, 12:11:17 PM2/1/18
to Dataverse Users Community
Hi Michel,

One thing to add to Phil's response is that Dataverse can be configured to use google analytics or piwik; so depending on which installation of Dataverse you're concerned with cookies from those may be something to consider in terms of user data storage and duration.

It's been a while since I looked at this, but I believe that the JSESSIONID cookie is necessary for normal use of Dataverse, even if a user is not logged in. I believe this is more for maintaining UI state than data gathering.

Best,
Pete

On Thursday, February 1, 2018 at 11:04:20 AM UTC-5, Philip Durbin wrote:
Yep, the main cookie is called "JSESSIONID" ("J" for Java since this is a Java web thing) as in the attached screenshot. If you use Shibboleth/SAML, there's an extra cookie called "_saml_idp" that remembers the last three institutions you used to log in. Shib can also have an extra cookie called "_check_is_passive_dv" if you use the ":ShibPassiveLoginEnabled" setting: http://guides.dataverse.org/en/4.8.5/installation/config.html#shibpassiveloginenabled

I wouldn't say these cookies are used to gather user data. HTTP is stateless so they keep your browser logged Dataverse.

https://github.com/IQSS/dataverse/issues/52 was sort of about cookies and session expiration but I don't think we document anything about storage duration and I'm not sure how to change it. Is there a specific problem you're having?

I hope this helps,

Phil
 
On Thu, Feb 1, 2018 at 10:02 AM, Michel Bamouni <olimi...@gmail.com> wrote:
Hello,

I want to know if dataverse use cookie to gather user data?
If true does dataverse store these data? To finish, how can set the storage duration?

Best regards,

Michel

--
You received this message because you are subscribed to the Google Groups "Dataverse Users Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dataverse-community+unsub...@googlegroups.com.
To post to this group, send email to dataverse...@googlegroups.com.

Michel Bamouni

unread,
Feb 2, 2018, 9:13:01 AM2/2/18
to Dataverse Users Community
Hi Peter and Phil,


Thanks for your answers.
If I ask these questions, it's because I have an organisational requirement about the respect of user privacy.
At the light of your anwser, the cookies is just to help loging and not to gather data.

Best regards,

Michel

Philip Durbin

unread,
Feb 2, 2018, 9:48:20 AM2/2/18
to dataverse...@googlegroups.com
That's right. As Pete point out, it's possible to configure Dataverse to use Google Analytics if you're interested in tracking user activity (clicks, etc.). The Javascript for Google Analytics use to be loaded by default but back in Dataverse 4.3 we made sure it isn't loaded unless you configure it ( https://github.com/IQSS/dataverse/issues/2901 ).

I hope this helps,

Phil

To unsubscribe from this group and stop receiving emails from it, send an email to dataverse-community+unsubscribe...@googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Dataverse Users Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dataverse-community+unsub...@googlegroups.com.
To post to this group, send email to dataverse-community@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/dataverse-community/b122a85c-61e2-4361-bacb-7f348de61f2c%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

Michel Bamouni

unread,
Feb 23, 2018, 8:43:00 AM2/23/18
to Dataverse Users Community
Hi,

I have additional questions always about cookies.

1) Which data the "Jsessionid" cookie gather exactly ?

2) Which idp informations the cookie "s_aml_idp gather?

Best regards,

Michel
To unsubscribe from this group and stop receiving emails from it, send an email to dataverse-community+unsub...@googlegroups.com.
To post to this group, send email to dataverse...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/dataverse-community/596f7685-c0fb-47d8-b8d1-b70fe09bdd15%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Dataverse Users Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dataverse-community+unsub...@googlegroups.com.
To post to this group, send email to dataverse...@googlegroups.com.

Brooke, Danny

unread,
Feb 23, 2018, 10:35:03 AM2/23/18
to dataverse...@googlegroups.com
Hi Michel, I'm not sure if we have an immediate answer. Instead of having the community investigate this, this is something that I'd encourage you to test out. It would be great if you could report back the findings here. I know that the EU has some specific laws regarding cookies, so your answers may be beneficial to other groups in the EU trying to adopt Dataverse. 

- Danny

To unsubscribe from this group and stop receiving emails from it, send an email to dataverse-community+unsubscribe...@googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Dataverse Users Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dataverse-community+unsubscribe...@googlegroups.com.

To post to this group, send email to dataverse...@googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Dataverse Users Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dataverse-community+unsub...@googlegroups.com.
To post to this group, send email to dataverse-community@googlegroups.com.
 To view this discussion on the web visit https://groups.google.com/d/msgid/dataverse-community/24e6e416-85c8-485a-b44c-8e7a8541617d%40googlegroups.com.
Reply all
Reply to author
Forward
0 new messages