Dspace IP Authorization for particular collection

171 views
Skip to first unread message

Salony Permanand

unread,
Jan 3, 2024, 11:04:23 AM1/3/24
to dspac...@googlegroups.com
Hello All,

I am using DSpace 7.6

I want to access restrict to particular collection for the general public, but if a user visits from an on-campus IP address, they can download/view the files.

For that I created a group named ipdata and provide authorization to that. Attached screnshot below

I havn't added any user to group

from authentication.cfg
plugin.sequence.org.dspace.authenticate.AuthenticationMethod = org.dspace.authenticate.IPAuthentication
and from authentication-ip.cfg
authentication-ip.ipdata = 1.2.3.4

Now If I want to access that collection from any  ip other than 1.2.3.4 , then it is showing all data. I also created new items after changes , that also not helped

 How will I restrict all ip's other than required

Any help is highly appreciated  

Salony Permanand
Screenshot from 2024-01-03 17-47-03.png

Julia Gilmore

unread,
May 13, 2024, 10:26:02 AM5/13/24
to DSpace Technical Support
Hi all, 

Following up on Salony's question - we are also wondering if its possible to require authorization to view a specific collection, and how we would go about setting that up? 

Our use case: Requiring student Id login via Shibboleth authentication to view a test bank. 

Suggestion: Any students that login via Shibboleth are assigned to a user group that has read access for the collection. Not sure if this is the way to go about it though!

Any guidance would be appreciated. 

Thank you, 

Julia

Young, Philip

unread,
May 15, 2024, 10:44:53 AM5/15/24
to Julia Gilmore, DSpace Technical Support
I did this recently for an item but it looks like you could do it for a collection as well.  For an item, Edit > Status > Authorizations and the first policy should be the item policy, where you can change Anonymous to your IP group.  Then the item should be visible only to that group, but not the public.   For a collection, I have not tested it, but try Edit > Authorizations to edit the groups.  Or try Access Control and apply a condition to the metadata.  In this case there may be some work to get your IP group listed as one of the access conditions in the drop-down.

Philip

From: dspac...@googlegroups.com <dspac...@googlegroups.com> on behalf of Julia Gilmore <jgilm...@gmail.com>
Sent: Monday, May 13, 2024 10:26 AM
To: DSpace Technical Support <dspac...@googlegroups.com>
Subject: [dspace-tech] Re: Dspace IP Authorization for particular collection
 
--
All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx
---
You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dspace-tech...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/336887d4-e6ee-4232-943b-0f36103e1e8bn%40googlegroups.com.

Andrew K

unread,
May 15, 2024, 11:01:34 AM5/15/24
to DSpace Technical Support
Hi,
There's this tab "Access Control".
I use "local" group for local IPs, then I set permissiont for this group to access bitstreams (files) or metadata (items).
WBR,
Andrew
2024-05-15_175719.png

середу, 15 травня 2024 р. о 17:44:53 UTC+3 Young, Philip пише:

Julia Gilmore

unread,
May 17, 2024, 3:21:36 PM5/17/24
to DSpace Technical Support
Thank you both! This is super helpful. 

Jayachristrayar S

unread,
Feb 19, 2025, 5:57:36 AM2/19/25
to DSpace Technical Support

Hi everyone,

I'm looking for some guidance or documentation on how to restrict access to DSpace documents. Specifically, I need to:

  • Make bitstream files accessible only via IP-based authentication (so only users from certain IPs can access them).
  • For non-IP users, restrict access and provide a "Request a Copy" option.

If anyone has experience setting this up or any documentation on how to do it, please share. 

i believe you guys are done this one. can you guide me to do this are give some documentation for do this

Would really appreciate any help!

regad 
jayachristrayar
Reply all
Reply to author
Forward
0 new messages