Djatoka and Authorization

[Brian Harrington]

Hi All,

I was wondering if anyone has a currently working setup with Djatoka and
Large Images that are restricted to certain users. I’m trying to do
something with the instructions under "Accommodating Viewing Restrictions”
here: https://wiki.duraspace.org/pages/viewpage.action?pageId=45547941 but
the instructions are out of date. (I’ll update them if I get a fix.) So
does anyone have a working example, and does it work with FESL by any
chance?

Thanks a lot,

Brian


--
Brian Harrington
Data Migration Specialist
LYRASIS
brian.ha...@lyrasis.org
skype: abbistani

[Nick Ruest]

Is this instead of using the Islandora XACML Editor restrict
datastreams, objects, and/or editing to particular users or roles?

-nruest

[1] https://github.com/islandora/islandora_xacml_editor

[Brian Harrington]

This is for allowing Djatoka to connect to objects that have been
restricted with the XACML editor. At least that’s what I’m hoping to do,
and what I *thought* this was supposed to allow. I have a collection of
JP2s that I need to restrict to authenticated users, but Djatoka connects
as “anonymous”, so logged in users can’t see the images.

Brian

>--
>For more information about using this group, please read our Listserv
>Guidelines: http://islandora.ca/content/welcome-islandora-listserv
>---
>You received this message because you are subscribed to the Google Groups
>"islandora" group.
>To unsubscribe from this group and stop receiving emails from it, send an
>email to islandora+...@googlegroups.com.
>Visit this group at http://groups.google.com/group/islandora.
>For more options, visit https://groups.google.com/d/optout.

[Nick Ruest]

What version are you on?

-nruest

[Brian Harrington]

7.x-1.3 with Fedora 3.6.2


Brian

[Nick Ruest]

Doesn't look like there has a been a change in this[1] since that
release and HEAD[2].

fwiw, I'm on HEAD with YUDL and we have a large image objects that are
only viewable by certain users and roles, and they are able to view
them. I'd share a link, but anonymous can't view them :-) (assuming I am
understanding your issue correctly)

-nruest

[1]
https://github.com/Islandora/islandora_solution_pack_large_image/blob/0cb132b8f947dad2de5db71324ccd6d4aa60de26/islandora_large_image.module#L198-L211
[2]
https://github.com/islandora/islandora_solution_pack_large_image/compare/0cb132b8f947dad2de5db71324ccd6d4aa60de26...706c49843624c93646a0d8e6d9c26153c5b9f2fb

[Brian Harrington]

You’re definitely understanding my issue correctly, and it sounds like the
stuff that I pointed to in the manual has been deprecated in favor of
tokens, which is great. But when I try to access a JP2 that’s been
limited to authenticated users through XACML, there’s no joy in
OpenSeadragon.

In the Drupal log I get a message saying that Anonymous was denied access
to the JP2 datastream, and more interestingly:

Notice: Trying to get property of non-object in
islandora_object_datastream_tokened_access_callback() (line 831 of
/var/www/drupal/sites/all/modules/islandora/islandora/islandora.module).



Brian