[Dspace-devel] [DuraSpace JIRA] (DS-1215) Display a default thumbnail if the user does not have permissions to view instead of 301 redirecting the image to a login screen

[Samuel Ottenhoff (DuraSpace JIRA)]

Samuel Ottenhoff created DS-1215:
------------------------------------

Summary: Display a default thumbnail if the user does not have permissions to view instead of 301 redirecting the image to a login screen
Key: DS-1215
URL: https://jira.duraspace.org/browse/DS-1215
Project: DSpace
Issue Type: Bug
Components: XMLUI
Affects Versions: 1.8.2
Reporter: Samuel Ottenhoff
Priority: Major


How to test:

1) Submit an item with a JPG only
2) filter-media to generate thumbnails
3) Revoke Anonymous access to all bitstreams
4) Logout
5) generate the indexes: bin/dspace index-update
6) view the index as an anonymous user

The thumbnail will not appear for the items where the anonymous access to the bitstreams was revoked. But instead of displaying nothing (or a default thumbnail), DSpace does the interruptRequest() on each of the thumbnails which results in the inlined image becoming a 301 request to login.

And because the interruptRequest was called, now attempt to immediately login: you will be redirected to the thumbnail.....

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://jira.duraspace.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

[Mark Diggory (DuraSpace JIRA)]

[ https://jira.duraspace.org/browse/DS-1215?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=25497#comment-25497 ]

Mark Diggory commented on DS-1215:
----------------------------------

Yes, I've definitely encountered it as well.

> Display a default thumbnail if the user does not have permissions to view instead of 301 redirecting the image to a login screen

> --------------------------------------------------------------------------------------------------------------------------------

[Samuel Ottenhoff (DuraSpace JIRA)]

[ https://jira.duraspace.org/browse/DS-1215?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=26396#comment-26396 ]

Samuel Ottenhoff commented on DS-1215:
--------------------------------------

Any ideas on the right way to resolve this?

> Display a default thumbnail if the user does not have permissions to view instead of 301 redirecting the image to a login screen

> --------------------------------------------------------------------------------------------------------------------------------

>
> Key: DS-1215
> URL: https://jira.duraspace.org/browse/DS-1215
> Project: DSpace
> Issue Type: Bug
> Components: XMLUI
> Affects Versions: 1.8.2
> Reporter: Samuel Ottenhoff
> Priority: Major
>
> How to test:
> 1) Submit an item with a JPG only
> 2) filter-media to generate thumbnails
> 3) Revoke Anonymous access to all bitstreams
> 4) Logout
> 5) generate the indexes: bin/dspace index-update
> 6) view the index as an anonymous user
> The thumbnail will not appear for the items where the anonymous access to the bitstreams was revoked. But instead of displaying nothing (or a default thumbnail), DSpace does the interruptRequest() on each of the thumbnails which results in the inlined image becoming a 301 request to login.
> And because the interruptRequest was called, now attempt to immediately login: you will be redirected to the thumbnail.....

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators

[Ivan Masár (DuraSpace JIRA)]

[ https://jira.duraspace.org/browse/DS-1215?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ivan Masár updated DS-1215:
---------------------------

Status: Volunteer Needed (was: Received)

> Display a default thumbnail if the user does not have permissions to view instead of 301 redirecting the image to a login screen

> --------------------------------------------------------------------------------------------------------------------------------

>
> Key: DS-1215
> URL: https://jira.duraspace.org/browse/DS-1215
> Project: DSpace
> Issue Type: Bug
> Components: XMLUI
> Affects Versions: 1.8.2
> Reporter: Samuel Ottenhoff
> Priority: Major
>
> How to test:
> 1) Submit an item with a JPG only
> 2) filter-media to generate thumbnails
> 3) Revoke Anonymous access to all bitstreams
> 4) Logout
> 5) generate the indexes: bin/dspace index-update
> 6) view the index as an anonymous user
> The thumbnail will not appear for the items where the anonymous access to the bitstreams was revoked. But instead of displaying nothing (or a default thumbnail), DSpace does the interruptRequest() on each of the thumbnails which results in the inlined image becoming a 301 request to login.
> And because the interruptRequest was called, now attempt to immediately login: you will be redirected to the thumbnail.....

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators

[Peter Dietz (DuraSpace JIRA)]

Peter Dietz commented on DS-1215

Re: Display a default thumbnail if the user does not have permissions to view instead of 301 redirecting the image to a login screen DS-740 can generate a thumbnail of restricted content that is publicly available, which solves half of the problem. The unsolved half would be if the site chose not to make public thumbnails of restricted content. Then we would have to not attempt to show the restricted thumbnail in XMLUI. Add Comment

This message was sent by Atlassian JIRA (v6.2.3#6260-sha1:63ef1d6)